Operation Windigo

[ocabj]

Apparently, there's a recently discovered Linux botnet that has been correlated to several malware/rootkit programs that have been widely disseminated.

Whitepaper:

http://www.welivesecurity.com/wp-content/uploads/2014/03/operation_windigo.pdf

IOC repo on github:

https://github.com/eset/malware-ioc

https://github.com/eset/malware-ioc/tree/master/windigo

Time to start writing up plugins or leveraging existing scripts to sweep your enterprise for the signatures.