Follow
Auto-Color #Linux Malware: "writes the malicious library file name into /etc/ld.preload ... Since libraries in ld.preload are loaded first, a malicious library can override Core Libraries"
https://unit42.paloaltonetworks.com/new-linux-backdoor-auto-color/
#security #linux #malware #ransomware #hackers