This NSA, FBI security advisory has four words you never want to see together: Fancy Bear Linux rootkit

From theregister.com

Bear

The NSA and FBI are sounding the alarm over a dangerous new strain of Linux malware being employed by Russian government hackers often dubbed the Fancy Bear crew.

Uncle Sam explicitly said on Thursday the miscreants – formally known as the 85th Main Special Service Center (GTsSS) – operate within the Russian intelligence directorate, aka the GRU. The software nasty in question is Drovorub, a rootkit designed to infect Linux systems, take control of them, and siphon off files. It is used against very particular targets that are valuable to the Kremlin, so before you panic, bear that in mind – no pun intended.

Read more…