The perfctl malware has been targeting vulnerabilities and misconfigurations in millions of Linux systems, likely infecting thousands.

Exploiting a catalog of 20,000 misconfigurations to infect Linux servers, the cryptomining malware has gone largely undetected through use of process masquerading but appears capable of more.

Thousands of machines running Linux have been infected by a malware strain that’s notable for its stealth, the number of misconfigurations it can exploit, and the breadth of malicious activities it can perform, researchers reported Thursday.

When you buy through links on our articles, Future and its syndication partners may earn a commission.

Linux systems are being targeted by a dangerous new malware that can serve as a loader, a proxy, and a cryptocurrency miner. Called Perfctl, the malware was recently spotted by cybersecurity researchers from Aqua Security,

Linux servers are the target of an ongoing campaign that delivers a stealthy malware dubbed perfctl with the primary aim of running a cryptocurrency miner and proxyjacking software.