Shc Linux Malware Installing CoinMiner

The ASEC analysis team recently discovered that a Linux malware developed with Shc has been installing a CoinMiner. It is presumed that after successful authentication through a dictionary attack on inadequately managed Linux SSH servers, various malware were installed on the target system. Among those installed were the Shc downloader, XMRig CoinMiner installed through the former, and DDoS IRC Bot, developed with Perl.

1. Shc (Shell Script Compiler)

Shc is an abbreviation for Shell Script Compiler and is responsible for …

analysis asec attack authentication coinminer dictionary attack linux linux malware malware malware analysis managed servers shc ssh system target team xmrig