{"id":41223,"date":"2024-10-04T14:55:47","date_gmt":"2024-10-04T13:55:47","guid":{"rendered":"https:\/\/quike.it\/es\/?p=41223"},"modified":"2024-10-04T14:55:47","modified_gmt":"2024-10-04T13:55:47","slug":"malware-perfctl-utiliza-linux-en-operacion-de-criptomineria","status":"publish","type":"post","link":"https:\/\/quike.it\/es\/malware-perfctl-utiliza-linux-en-operacion-de-criptomineria\/","title":{"rendered":"Malware \u00abperfctl\u00bb utiliza Linux en Operaci\u00f3n de Criptominer\u00eda"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"41223\" class=\"elementor elementor-41223\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-b01cccf elementor-section-full_width elementor-section-height-default elementor-section-height-default\" data-id=\"b01cccf\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-dedbf0c\" data-id=\"dedbf0c\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-cd87423 elementor-widget elementor-widget-text-editor\" data-id=\"cd87423\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>Un <a href=\"https:\/\/quike.it\/es\/como-eliminar-malware-de-tu-computadora\/\" target=\"_blank\" rel=\"noopener\"><strong>malware<\/strong><\/a> conocido como <span style=\"color: #800000;\"><strong>\u00abperfctl\u00bb<\/strong><\/span> ha estado atacando servidores y estaciones de trabajo <strong>Linux<\/strong> durante al menos tres a\u00f1os, logrando pasar en gran medida desapercibido gracias a sus avanzadas t\u00e9cnicas de evasi\u00f3n y el uso de <a href=\"https:\/\/es.wikipedia.org\/wiki\/Rootkit\" target=\"_blank\" rel=\"noopener\"><strong>rootkits.<\/strong><\/a><\/p><p>De acuerdo con los investigadores de <strong>Aqua Nautilus<\/strong>, quienes descubrieron este <a href=\"https:\/\/quike.it\/es\/como-eliminar-malware-de-tu-computadora\/\" target=\"_blank\" rel=\"noopener\"><strong>malware,<\/strong><\/a> se estima que <span style=\"color: #800000;\"><strong>perfctl<\/strong><\/span> ha comprometido millones de <strong>servidores Linux<\/strong> en los \u00faltimos a\u00f1os, con miles de ellos posiblemente infectados.<\/p><p>Esta conclusi\u00f3n se apoya en <a href=\"https:\/\/forum.yunohost.org\/t\/perfctl-malware-attack\/26326\" target=\"_blank\" rel=\"noopener\"><strong>numerosos reportes de v\u00edctimas<\/strong><\/a> que han descrito incidentes en <a href=\"https:\/\/es.stackoverflow.com\/questions\/580957\/perfctl-usa-el-100-de-los-recursos-del-cpu\" target=\"_blank\" rel=\"noopener\"><strong>foros en l\u00ednea<\/strong><\/a>, todos presentando indicadores de compromiso vinculados espec\u00edficamente con la actividad de <span style=\"color: #800000;\"><strong>perfctl.<\/strong><\/span><\/p><p>El principal objetivo de <span style=\"color: #800000;\"><strong>perfctl,<\/strong><\/span> <a href=\"https:\/\/www.aquasec.com\/blog\/perfctl-a-stealthy-malware-targeting-millions-of-linux-servers\/\" target=\"_blank\" rel=\"noopener\"><strong>seg\u00fan Aqua Nautilus<\/strong><\/a>, es la <a href=\"https:\/\/es.wikipedia.org\/wiki\/Criptomoneda#Minado\" target=\"_blank\" rel=\"noopener\"><strong>criptominer\u00eda,<\/strong><\/a> utilizando los servidores infectados para <strong>minar Monero,<\/strong> una <a href=\"https:\/\/es.wikipedia.org\/wiki\/Criptomoneda\" target=\"_blank\" rel=\"noopener\"><strong>criptomoneda<\/strong><\/a> dif\u00edcil de rastrear. No obstante, este <strong>malware<\/strong> podr\u00eda ser f\u00e1cilmente empleado para llevar a cabo operaciones m\u00e1s destructivas.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-beaa20e elementor-grid-1 elementor-grid-tablet-2 elementor-grid-mobile-1 elementor-widget elementor-widget-loop-grid\" data-id=\"beaa20e\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;template_id&quot;:&quot;30519&quot;,&quot;columns&quot;:1,&quot;_skin&quot;:&quot;post&quot;,&quot;columns_tablet&quot;:&quot;2&quot;,&quot;columns_mobile&quot;:&quot;1&quot;,&quot;edit_handle_selector&quot;:&quot;[data-elementor-type=\\&quot;loop-item\\&quot;]&quot;,&quot;row_gap&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;size&quot;:&quot;&quot;,&quot;sizes&quot;:[]},&quot;row_gap_tablet&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;size&quot;:&quot;&quot;,&quot;sizes&quot;:[]},&quot;row_gap_mobile&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;size&quot;:&quot;&quot;,&quot;sizes&quot;:[]}}\" data-widget_type=\"loop-grid.post\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-loop-container elementor-grid\" role=\"list\">\n\t\t<style id=\"loop-30519\">.elementor-30519 .elementor-element.elementor-element-98493d2 .elementor-column-gap-custom .elementor-column > .elementor-element-populated{padding:2px;}.elementor-30519 .elementor-element.elementor-element-ccee508 > .elementor-widget-wrap > .elementor-widget:not(.elementor-widget__width-auto):not(.elementor-widget__width-initial):not(:last-child):not(.elementor-absolute){--kit-widget-spacing:1px;}.elementor-widget-image .widget-image-caption{font-family:var( --e-global-typography-text-font-family ), Sans-serif;font-weight:var( --e-global-typography-text-font-weight );}.elementor-30519 .elementor-element.elementor-element-80149f2 img{height:85px;object-fit:cover;object-position:center center;}.elementor-30519 .elementor-element.elementor-element-80149f2:not( .elementor-widget-image ), .elementor-30519 .elementor-element.elementor-element-80149f2.elementor-widget-image img{-webkit-mask-image:url( https:\/\/quike.it\/es\/wp-content\/plugins\/elementor\/assets\/mask-shapes\/circle.svg );-webkit-mask-size:contain;-webkit-mask-position:center center;-webkit-mask-repeat:no-repeat;}.elementor-30519 .elementor-element.elementor-element-2109b1e > .elementor-widget-wrap > .elementor-widget:not(.elementor-widget__width-auto):not(.elementor-widget__width-initial):not(:last-child):not(.elementor-absolute){--kit-widget-spacing:3px;}.elementor-widget-post-info .elementor-icon-list-item{font-family:var( --e-global-typography-text-font-family ), Sans-serif;font-weight:var( --e-global-typography-text-font-weight );}.elementor-30519 .elementor-element.elementor-element-26a68f7 .elementor-icon-list-icon{width:17px;}.elementor-30519 .elementor-element.elementor-element-26a68f7 .elementor-icon-list-icon i{font-size:17px;}.elementor-30519 .elementor-element.elementor-element-26a68f7 .elementor-icon-list-icon svg{--e-icon-list-icon-size:17px;}body:not(.rtl) .elementor-30519 .elementor-element.elementor-element-26a68f7 .elementor-icon-list-text{padding-left:5px;}body.rtl .elementor-30519 .elementor-element.elementor-element-26a68f7 .elementor-icon-list-text{padding-right:5px;}.elementor-30519 .elementor-element.elementor-element-26a68f7 .elementor-icon-list-item{font-family:\"Work Sans\", Sans-serif;font-weight:600;text-transform:uppercase;word-spacing:0px;}.elementor-30519 .elementor-element.elementor-element-26a68f7{width:100%;max-width:100%;align-self:center;}.elementor-widget-heading .elementor-heading-title{font-family:var( --e-global-typography-primary-font-family ), Sans-serif;font-weight:var( --e-global-typography-primary-font-weight );}.elementor-30519 .elementor-element.elementor-element-1ed9e84 .elementor-heading-title{font-family:\"Roboto\", Sans-serif;font-weight:600;color:#000000;}.elementor-widget-icon-list .elementor-icon-list-item > .elementor-icon-list-text, .elementor-widget-icon-list .elementor-icon-list-item > a{font-family:var( --e-global-typography-text-font-family ), Sans-serif;font-weight:var( --e-global-typography-text-font-weight );}.elementor-30519 .elementor-element.elementor-element-714486b .elementor-icon-list-icon i{color:#000000;transition:color 0.3s;}.elementor-30519 .elementor-element.elementor-element-714486b .elementor-icon-list-icon svg{fill:#000000;transition:fill 0.3s;}.elementor-30519 .elementor-element.elementor-element-714486b{--e-icon-list-icon-size:13px;--e-icon-list-icon-align:left;--e-icon-list-icon-margin:0 calc(var(--e-icon-list-icon-size, 1em) * 0.25) 0 0;--icon-vertical-align:center;--icon-vertical-offset:0px;margin:0px 0px calc(var(--kit-widget-spacing, 0px) + 0px) 0px;padding:0px 0px 0px 0px;width:100%;max-width:100%;}.elementor-30519 .elementor-element.elementor-element-714486b .elementor-icon-list-item > .elementor-icon-list-text, .elementor-30519 .elementor-element.elementor-element-714486b .elementor-icon-list-item > a{font-family:\"Work Sans\", Sans-serif;font-size:11px;font-weight:500;text-transform:capitalize;line-height:16px;letter-spacing:1px;}.elementor-30519 .elementor-element.elementor-element-714486b .elementor-icon-list-text{color:#333333;transition:color 0.3s;}.elementor-30519 .elementor-element.elementor-element-0a32de7 .elementor-icon-list-icon i{color:#000000;transition:color 0.3s;}.elementor-30519 .elementor-element.elementor-element-0a32de7 .elementor-icon-list-icon svg{fill:#000000;transition:fill 0.3s;}.elementor-30519 .elementor-element.elementor-element-0a32de7{--e-icon-list-icon-size:13px;--e-icon-list-icon-align:left;--e-icon-list-icon-margin:0 calc(var(--e-icon-list-icon-size, 1em) * 0.25) 0 0;--icon-vertical-align:center;--icon-vertical-offset:0px;margin:0px 0px calc(var(--kit-widget-spacing, 0px) + 0px) 0px;padding:0px 0px 0px 0px;width:100%;max-width:100%;}.elementor-30519 .elementor-element.elementor-element-0a32de7 .elementor-icon-list-item > .elementor-icon-list-text, .elementor-30519 .elementor-element.elementor-element-0a32de7 .elementor-icon-list-item > a{font-family:\"Work Sans\", Sans-serif;font-size:11px;font-weight:500;text-transform:capitalize;line-height:16px;letter-spacing:1px;}.elementor-30519 .elementor-element.elementor-element-0a32de7 .elementor-icon-list-text{color:#333333;transition:color 0.3s;}@media(min-width:768px){.elementor-30519 .elementor-element.elementor-element-ccee508{width:20%;}.elementor-30519 .elementor-element.elementor-element-2109b1e{width:79.997%;}}@media(max-width:767px){.elementor-30519 .elementor-element.elementor-element-98493d2 .elementor-column-gap-custom .elementor-column > .elementor-element-populated{padding:2px;}.elementor-30519 .elementor-element.elementor-element-ccee508{width:25%;}.elementor-30519 .elementor-element.elementor-element-2109b1e{width:75%;}.elementor-30519 .elementor-element.elementor-element-1ed9e84 .elementor-heading-title{font-size:15px;}}<\/style>\t\t<div data-elementor-type=\"loop-item\" data-elementor-id=\"30519\" class=\"elementor elementor-30519 e-loop-item e-loop-item-40309 post-40309 post type-post status-publish format-standard has-post-thumbnail hentry category-linux category-seguridad\" data-elementor-post-type=\"elementor_library\" data-custom-edit-handle=\"1\">\n\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-98493d2 elementor-section-full_width elementor-section-height-default elementor-section-height-default\" data-id=\"98493d2\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-custom\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-ccee508\" data-id=\"ccee508\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-80149f2 elementor-widget elementor-widget-image\" data-id=\"80149f2\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/quike.it\/es\/el-malware-sedexp-paso-dos-anos-oculto-en-linux\/\" target=\"_blank\">\n\t\t\t\t\t\t\t<img fetchpriority=\"high\" decoding=\"async\" width=\"1120\" height=\"600\" src=\"https:\/\/quike.it\/es\/wp-content\/uploads\/sites\/3\/2024\/07\/Linux_fail.png\" class=\"attachment-full size-full wp-image-38457\" alt=\"\" srcset=\"https:\/\/quike.it\/es\/wp-content\/uploads\/sites\/3\/2024\/07\/Linux_fail.png 1120w, https:\/\/quike.it\/es\/wp-content\/uploads\/sites\/3\/2024\/07\/Linux_fail-300x161.png 300w, https:\/\/quike.it\/es\/wp-content\/uploads\/sites\/3\/2024\/07\/Linux_fail-1024x549.png 1024w, https:\/\/quike.it\/es\/wp-content\/uploads\/sites\/3\/2024\/07\/Linux_fail-768x411.png 768w\" sizes=\"(max-width: 1120px) 100vw, 1120px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-2109b1e\" data-id=\"2109b1e\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-26a68f7 elementor-align-left elementor-widget__width-inherit elementor-widget elementor-widget-post-info\" data-id=\"26a68f7\" data-element_type=\"widget\" data-e-type=\"widget\" id=\"categorias-post\" data-widget_type=\"post-info.default\">\n\t\t\t\t\t\t\t<ul class=\"elementor-inline-items elementor-icon-list-items elementor-post-info\">\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item elementor-repeater-item-dfd774d elementor-inline-item\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text elementor-post-info__item elementor-post-info__item--type-custom\">\n\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/quike.it\/es\/category\/informatica\/sistemas-operativos\/linux\/\" rel=\"tag\">Linux<\/a> <a href=\"https:\/\/quike.it\/es\/category\/informatica\/seguridad\/\" rel=\"tag\">Seguridad<\/a>\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1ed9e84 elementor-widget elementor-widget-heading\" data-id=\"1ed9e84\" data-element_type=\"widget\" data-e-type=\"widget\" id=\"top-post\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<div class=\"elementor-heading-title elementor-size-default\"><a href=\"https:\/\/quike.it\/es\/el-malware-sedexp-paso-dos-anos-oculto-en-linux\/\" target=\"_blank\">El Malware &#8216;sedexp&#8217; pas\u00f3 dos a\u00f1os oculto en Linux<\/a><\/div>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-714486b elementor-icon-list--layout-inline elementor-align-start elementor-hidden-tablet elementor-hidden-mobile elementor-widget__width-inherit elementor-list-item-link-full_width elementor-widget elementor-widget-icon-list\" data-id=\"714486b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"icon-list.default\">\n\t\t\t\t\t\t\t<ul class=\"elementor-icon-list-items elementor-inline-items\">\n\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item elementor-inline-item\">\n\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/quike.it\/es\/el-malware-sedexp-paso-dos-anos-oculto-en-linux\/\">\n\n\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-book-reader\" viewBox=\"0 0 512 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M352 96c0-53.02-42.98-96-96-96s-96 42.98-96 96 42.98 96 96 96 96-42.98 96-96zM233.59 241.1c-59.33-36.32-155.43-46.3-203.79-49.05C13.55 191.13 0 203.51 0 219.14v222.8c0 14.33 11.59 26.28 26.49 27.05 43.66 2.29 131.99 10.68 193.04 41.43 9.37 4.72 20.48-1.71 20.48-11.87V252.56c-.01-4.67-2.32-8.95-6.42-11.46zm248.61-49.05c-48.35 2.74-144.46 12.73-203.78 49.05-4.1 2.51-6.41 6.96-6.41 11.63v245.79c0 10.19 11.14 16.63 20.54 11.9 61.04-30.72 149.32-39.11 192.97-41.4 14.9-.78 26.49-12.73 26.49-27.06V219.14c-.01-15.63-13.56-28.01-29.81-27.09z\"><\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">106 lecturas<\/span>\n\t\t\t\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item elementor-inline-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-comments\" viewBox=\"0 0 576 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M416 192c0-88.4-93.1-160-208-160S0 103.6 0 192c0 34.3 14.1 65.9 38 92-13.4 30.2-35.5 54.2-35.8 54.5-2.2 2.3-2.8 5.7-1.5 8.7S4.8 352 8 352c36.6 0 66.9-12.3 88.7-25 32.2 15.7 70.3 25 111.3 25 114.9 0 208-71.6 208-160zm122 220c23.9-26 38-57.7 38-92 0-66.9-53.5-124.2-129.3-148.1.9 6.6 1.3 13.3 1.3 20.1 0 105.9-107.7 192-240 192-10.8 0-21.3-.8-31.7-1.9C207.8 439.6 281.8 480 368 480c41 0 79.1-9.2 111.3-25 21.8 12.7 52.1 25 88.7 25 3.2 0 6.1-1.9 7.3-4.8 1.3-2.9.7-6.3-1.5-8.7-.3-.3-22.4-24.2-35.8-54.5z\"><\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\"><a href=\"https:\/\/quike.it\/es\/el-malware-sedexp-paso-dos-anos-oculto-en-linux\/#respond\">sin comentarios<\/a><\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0a32de7 elementor-icon-list--layout-inline elementor-align-start elementor-widget__width-inherit elementor-hidden-desktop elementor-list-item-link-full_width elementor-widget elementor-widget-icon-list\" data-id=\"0a32de7\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"icon-list.default\">\n\t\t\t\t\t\t\t<ul class=\"elementor-icon-list-items elementor-inline-items\">\n\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item elementor-inline-item\">\n\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/quike.it\/es\/el-malware-sedexp-paso-dos-anos-oculto-en-linux\/\">\n\n\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-book-reader\" viewBox=\"0 0 512 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M352 96c0-53.02-42.98-96-96-96s-96 42.98-96 96 42.98 96 96 96 96-42.98 96-96zM233.59 241.1c-59.33-36.32-155.43-46.3-203.79-49.05C13.55 191.13 0 203.51 0 219.14v222.8c0 14.33 11.59 26.28 26.49 27.05 43.66 2.29 131.99 10.68 193.04 41.43 9.37 4.72 20.48-1.71 20.48-11.87V252.56c-.01-4.67-2.32-8.95-6.42-11.46zm248.61-49.05c-48.35 2.74-144.46 12.73-203.78 49.05-4.1 2.51-6.41 6.96-6.41 11.63v245.79c0 10.19 11.14 16.63 20.54 11.9 61.04-30.72 149.32-39.11 192.97-41.4 14.9-.78 26.49-12.73 26.49-27.06V219.14c-.01-15.63-13.56-28.01-29.81-27.09z\"><\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">106 lecturas<\/span>\n\t\t\t\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item elementor-inline-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-comments\" viewBox=\"0 0 576 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M416 192c0-88.4-93.1-160-208-160S0 103.6 0 192c0 34.3 14.1 65.9 38 92-13.4 30.2-35.5 54.2-35.8 54.5-2.2 2.3-2.8 5.7-1.5 8.7S4.8 352 8 352c36.6 0 66.9-12.3 88.7-25 32.2 15.7 70.3 25 111.3 25 114.9 0 208-71.6 208-160zm122 220c23.9-26 38-57.7 38-92 0-66.9-53.5-124.2-129.3-148.1.9 6.6 1.3 13.3 1.3 20.1 0 105.9-107.7 192-240 192-10.8 0-21.3-.8-31.7-1.9C207.8 439.6 281.8 480 368 480c41 0 79.1-9.2 111.3-25 21.8 12.7 52.1 25 88.7 25 3.2 0 6.1-1.9 7.3-4.8 1.3-2.9.7-6.3-1.5-8.7-.3-.3-22.4-24.2-35.8-54.5z\"><\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\"><a href=\"https:\/\/quike.it\/es\/el-malware-sedexp-paso-dos-anos-oculto-en-linux\/#respond\">0<\/a><\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4c2b75a elementor-widget elementor-widget-heading\" data-id=\"4c2b75a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Funcionamiento de la infecci\u00f3n<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-fcc9b1d elementor-widget elementor-widget-image\" data-id=\"fcc9b1d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t\t\t\t\t\t\t\t\t<figure class=\"wp-caption\">\n\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/quike.it\/es\/wp-content\/uploads\/sites\/3\/2024\/10\/blog_2916.jpg\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"blog_2916\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6NDEyMzIsInVybCI6Imh0dHBzOlwvXC9xdWlrZS5pdFwvZXNcL3dwLWNvbnRlbnRcL3VwbG9hZHNcL3NpdGVzXC8zXC8yMDI0XC8xMFwvYmxvZ18yOTE2LmpwZyJ9\">\n\t\t\t\t\t\t\t<img decoding=\"async\" width=\"942\" height=\"337\" src=\"https:\/\/quike.it\/es\/wp-content\/uploads\/sites\/3\/2024\/10\/blog_2916.jpg\" class=\"attachment-full size-full wp-image-41232\" alt=\"perfctl\" srcset=\"https:\/\/quike.it\/es\/wp-content\/uploads\/sites\/3\/2024\/10\/blog_2916.jpg 942w, https:\/\/quike.it\/es\/wp-content\/uploads\/sites\/3\/2024\/10\/blog_2916-300x107.jpg 300w, https:\/\/quike.it\/es\/wp-content\/uploads\/sites\/3\/2024\/10\/blog_2916-768x275.jpg 768w\" sizes=\"(max-width: 942px) 100vw, 942px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t<figcaption class=\"widget-image-caption wp-caption-text\">Configuraciones incorrectas que perfctl busca para obtener acceso inicial o realizar movimientos laterales.  \nFuente: Aqua Nautilus.<\/figcaption>\n\t\t\t\t\t\t\t\t\t\t<\/figure>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5b257d6 elementor-widget elementor-widget-text-editor\" data-id=\"5b257d6\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p><strong>Aqua Nautilus<\/strong> sostiene que los actores maliciosos aprovechan configuraciones err\u00f3neas o la exposici\u00f3n de secretos para comprometer <strong>servidores Linux.<\/strong><\/p><p>Estas fallas incluyen desde archivos p\u00fablicos que contienen credenciales hasta interfaces de inicio de sesi\u00f3n abiertas al acceso no autorizado.<\/p><p>Los investigadores tambi\u00e9n han detectado el utilizo de las vulnerabilidades <strong>CVE-2023-33246<\/strong>, una falla de ejecuci\u00f3n remota de comandos que afecta a las <em><strong>versiones 5.1.0<\/strong><\/em> y anteriores de <strong>Apache RocketMQ,<\/strong> y <strong>CVE-2021-4034 <em>(PwnKit),<\/em><\/strong> una vulnerabilidad de elevaci\u00f3n de privilegios en <strong>Polkit.<\/strong><\/p><p>Una vez que los atacantes logran acceso inicial, descargan y ejecutan una archivo \u00fatil empaquetado y ofuscado llamada <strong>\u00abhttpd\u00bb<\/strong> desde su servidor. Este archivo luego se copia en el directorio <em><strong>\/tmp<\/strong><\/em> bajo el nombre <em><strong>\u00absh\u00bb,<\/strong><\/em> eliminando el binario original.<\/p><p>El nuevo proceso adopta el mismo nombre <em><strong>(\u00absh\u00bb),<\/strong><\/em> camufl\u00e1ndose eficazmente entre las operaciones normales del sistema <strong>Linux.<\/strong><\/p><p>Para garantizar la persistencia, se crean copias adicionales en otras ubicaciones del sistema, como <em><strong>\u00ab\/root\/.config\u00bb,<\/strong> <strong>\u00ab\/usr\/bin\/\u00bb<\/strong><\/em> y <em><strong>\u00ab\/usr\/lib\u00bb,<\/strong><\/em> asegurando que el <strong>malware<\/strong> sobreviva a intentos de limpieza.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ec70d46 elementor-widget elementor-widget-image\" data-id=\"ec70d46\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t\t\t\t\t\t\t\t\t<figure class=\"wp-caption\">\n\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/quike.it\/es\/wp-content\/uploads\/sites\/3\/2024\/10\/blog_2917.jpg\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"blog_2917\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6NDEyMzMsInVybCI6Imh0dHBzOlwvXC9xdWlrZS5pdFwvZXNcL3dwLWNvbnRlbnRcL3VwbG9hZHNcL3NpdGVzXC8zXC8yMDI0XC8xMFwvYmxvZ18yOTE3LmpwZyJ9\">\n\t\t\t\t\t\t\t<img decoding=\"async\" width=\"1231\" height=\"545\" src=\"https:\/\/quike.it\/es\/wp-content\/uploads\/sites\/3\/2024\/10\/blog_2917.jpg\" class=\"attachment-full size-full wp-image-41233\" alt=\"perfctl\" srcset=\"https:\/\/quike.it\/es\/wp-content\/uploads\/sites\/3\/2024\/10\/blog_2917.jpg 1231w, https:\/\/quike.it\/es\/wp-content\/uploads\/sites\/3\/2024\/10\/blog_2917-300x133.jpg 300w, https:\/\/quike.it\/es\/wp-content\/uploads\/sites\/3\/2024\/10\/blog_2917-1024x453.jpg 1024w, https:\/\/quike.it\/es\/wp-content\/uploads\/sites\/3\/2024\/10\/blog_2917-768x340.jpg 768w\" sizes=\"(max-width: 1231px) 100vw, 1231px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t<figcaption class=\"widget-image-caption wp-caption-text\">Ubicaciones donde el malware deposita archivos.  \nFuente: Aqua Nautilus.<\/figcaption>\n\t\t\t\t\t\t\t\t\t\t<\/figure>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d3530b7 elementor-grid-1 elementor-grid-tablet-2 elementor-grid-mobile-1 elementor-widget elementor-widget-loop-grid\" data-id=\"d3530b7\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;template_id&quot;:&quot;30519&quot;,&quot;columns&quot;:1,&quot;_skin&quot;:&quot;post&quot;,&quot;columns_tablet&quot;:&quot;2&quot;,&quot;columns_mobile&quot;:&quot;1&quot;,&quot;edit_handle_selector&quot;:&quot;[data-elementor-type=\\&quot;loop-item\\&quot;]&quot;,&quot;row_gap&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;size&quot;:&quot;&quot;,&quot;sizes&quot;:[]},&quot;row_gap_tablet&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;size&quot;:&quot;&quot;,&quot;sizes&quot;:[]},&quot;row_gap_mobile&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;size&quot;:&quot;&quot;,&quot;sizes&quot;:[]}}\" data-widget_type=\"loop-grid.post\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-loop-container elementor-grid\" role=\"list\">\n\t\t\t\t<div data-elementor-type=\"loop-item\" data-elementor-id=\"30519\" class=\"elementor elementor-30519 e-loop-item e-loop-item-40065 post-40065 post type-post status-publish format-standard has-post-thumbnail hentry category-linux category-seguridad category-windows\" data-elementor-post-type=\"elementor_library\" data-custom-edit-handle=\"1\">\n\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-98493d2 elementor-section-full_width elementor-section-height-default elementor-section-height-default\" data-id=\"98493d2\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-custom\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-ccee508\" data-id=\"ccee508\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-80149f2 elementor-widget elementor-widget-image\" data-id=\"80149f2\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/quike.it\/es\/fallo-en-arranque-dual-linux-tras-ultima-actualizacion-de-windows\/\" target=\"_blank\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"1120\" height=\"600\" src=\"https:\/\/quike.it\/es\/wp-content\/uploads\/sites\/3\/2024\/08\/Windows_linux_alert.png\" class=\"attachment-full size-full wp-image-40067\" alt=\"\" srcset=\"https:\/\/quike.it\/es\/wp-content\/uploads\/sites\/3\/2024\/08\/Windows_linux_alert.png 1120w, https:\/\/quike.it\/es\/wp-content\/uploads\/sites\/3\/2024\/08\/Windows_linux_alert-300x161.png 300w, https:\/\/quike.it\/es\/wp-content\/uploads\/sites\/3\/2024\/08\/Windows_linux_alert-1024x549.png 1024w, https:\/\/quike.it\/es\/wp-content\/uploads\/sites\/3\/2024\/08\/Windows_linux_alert-768x411.png 768w\" sizes=\"(max-width: 1120px) 100vw, 1120px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-2109b1e\" data-id=\"2109b1e\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-26a68f7 elementor-align-left elementor-widget__width-inherit elementor-widget elementor-widget-post-info\" data-id=\"26a68f7\" data-element_type=\"widget\" data-e-type=\"widget\" id=\"categorias-post\" data-widget_type=\"post-info.default\">\n\t\t\t\t\t\t\t<ul class=\"elementor-inline-items elementor-icon-list-items elementor-post-info\">\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item elementor-repeater-item-dfd774d elementor-inline-item\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text elementor-post-info__item elementor-post-info__item--type-custom\">\n\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/quike.it\/es\/category\/informatica\/sistemas-operativos\/linux\/\" rel=\"tag\">Linux<\/a> <a href=\"https:\/\/quike.it\/es\/category\/informatica\/seguridad\/\" rel=\"tag\">Seguridad<\/a> <a href=\"https:\/\/quike.it\/es\/category\/informatica\/sistemas-operativos\/windows\/\" rel=\"tag\">Windows<\/a>\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1ed9e84 elementor-widget elementor-widget-heading\" data-id=\"1ed9e84\" data-element_type=\"widget\" data-e-type=\"widget\" id=\"top-post\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<div class=\"elementor-heading-title elementor-size-default\"><a href=\"https:\/\/quike.it\/es\/fallo-en-arranque-dual-linux-tras-ultima-actualizacion-de-windows\/\" target=\"_blank\">Fallo en arranque dual Linux tras \u00faltima actualizaci\u00f3n de Windows<\/a><\/div>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-714486b elementor-icon-list--layout-inline elementor-align-start elementor-hidden-tablet elementor-hidden-mobile elementor-widget__width-inherit elementor-list-item-link-full_width elementor-widget elementor-widget-icon-list\" data-id=\"714486b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"icon-list.default\">\n\t\t\t\t\t\t\t<ul class=\"elementor-icon-list-items elementor-inline-items\">\n\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item elementor-inline-item\">\n\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/quike.it\/es\/fallo-en-arranque-dual-linux-tras-ultima-actualizacion-de-windows\/\">\n\n\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-book-reader\" viewBox=\"0 0 512 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M352 96c0-53.02-42.98-96-96-96s-96 42.98-96 96 42.98 96 96 96 96-42.98 96-96zM233.59 241.1c-59.33-36.32-155.43-46.3-203.79-49.05C13.55 191.13 0 203.51 0 219.14v222.8c0 14.33 11.59 26.28 26.49 27.05 43.66 2.29 131.99 10.68 193.04 41.43 9.37 4.72 20.48-1.71 20.48-11.87V252.56c-.01-4.67-2.32-8.95-6.42-11.46zm248.61-49.05c-48.35 2.74-144.46 12.73-203.78 49.05-4.1 2.51-6.41 6.96-6.41 11.63v245.79c0 10.19 11.14 16.63 20.54 11.9 61.04-30.72 149.32-39.11 192.97-41.4 14.9-.78 26.49-12.73 26.49-27.06V219.14c-.01-15.63-13.56-28.01-29.81-27.09z\"><\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">107 lecturas<\/span>\n\t\t\t\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item elementor-inline-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-comments\" viewBox=\"0 0 576 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M416 192c0-88.4-93.1-160-208-160S0 103.6 0 192c0 34.3 14.1 65.9 38 92-13.4 30.2-35.5 54.2-35.8 54.5-2.2 2.3-2.8 5.7-1.5 8.7S4.8 352 8 352c36.6 0 66.9-12.3 88.7-25 32.2 15.7 70.3 25 111.3 25 114.9 0 208-71.6 208-160zm122 220c23.9-26 38-57.7 38-92 0-66.9-53.5-124.2-129.3-148.1.9 6.6 1.3 13.3 1.3 20.1 0 105.9-107.7 192-240 192-10.8 0-21.3-.8-31.7-1.9C207.8 439.6 281.8 480 368 480c41 0 79.1-9.2 111.3-25 21.8 12.7 52.1 25 88.7 25 3.2 0 6.1-1.9 7.3-4.8 1.3-2.9.7-6.3-1.5-8.7-.3-.3-22.4-24.2-35.8-54.5z\"><\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\"><a href=\"https:\/\/quike.it\/es\/fallo-en-arranque-dual-linux-tras-ultima-actualizacion-de-windows\/#respond\">sin comentarios<\/a><\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0a32de7 elementor-icon-list--layout-inline elementor-align-start elementor-widget__width-inherit elementor-hidden-desktop elementor-list-item-link-full_width elementor-widget elementor-widget-icon-list\" data-id=\"0a32de7\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"icon-list.default\">\n\t\t\t\t\t\t\t<ul class=\"elementor-icon-list-items elementor-inline-items\">\n\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item elementor-inline-item\">\n\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/quike.it\/es\/fallo-en-arranque-dual-linux-tras-ultima-actualizacion-de-windows\/\">\n\n\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-book-reader\" viewBox=\"0 0 512 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M352 96c0-53.02-42.98-96-96-96s-96 42.98-96 96 42.98 96 96 96 96-42.98 96-96zM233.59 241.1c-59.33-36.32-155.43-46.3-203.79-49.05C13.55 191.13 0 203.51 0 219.14v222.8c0 14.33 11.59 26.28 26.49 27.05 43.66 2.29 131.99 10.68 193.04 41.43 9.37 4.72 20.48-1.71 20.48-11.87V252.56c-.01-4.67-2.32-8.95-6.42-11.46zm248.61-49.05c-48.35 2.74-144.46 12.73-203.78 49.05-4.1 2.51-6.41 6.96-6.41 11.63v245.79c0 10.19 11.14 16.63 20.54 11.9 61.04-30.72 149.32-39.11 192.97-41.4 14.9-.78 26.49-12.73 26.49-27.06V219.14c-.01-15.63-13.56-28.01-29.81-27.09z\"><\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">107 lecturas<\/span>\n\t\t\t\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item elementor-inline-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-comments\" viewBox=\"0 0 576 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M416 192c0-88.4-93.1-160-208-160S0 103.6 0 192c0 34.3 14.1 65.9 38 92-13.4 30.2-35.5 54.2-35.8 54.5-2.2 2.3-2.8 5.7-1.5 8.7S4.8 352 8 352c36.6 0 66.9-12.3 88.7-25 32.2 15.7 70.3 25 111.3 25 114.9 0 208-71.6 208-160zm122 220c23.9-26 38-57.7 38-92 0-66.9-53.5-124.2-129.3-148.1.9 6.6 1.3 13.3 1.3 20.1 0 105.9-107.7 192-240 192-10.8 0-21.3-.8-31.7-1.9C207.8 439.6 281.8 480 368 480c41 0 79.1-9.2 111.3-25 21.8 12.7 52.1 25 88.7 25 3.2 0 6.1-1.9 7.3-4.8 1.3-2.9.7-6.3-1.5-8.7-.3-.3-22.4-24.2-35.8-54.5z\"><\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\"><a href=\"https:\/\/quike.it\/es\/fallo-en-arranque-dual-linux-tras-ultima-actualizacion-de-windows\/#respond\">0<\/a><\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c09697b elementor-widget elementor-widget-heading\" data-id=\"c09697b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Principales mecanismos de operaci\u00f3n y t\u00e9cnicas de evasi\u00f3n.<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b256e9b elementor-widget elementor-widget-image\" data-id=\"b256e9b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t\t\t\t\t\t\t\t\t<figure class=\"wp-caption\">\n\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/quike.it\/es\/wp-content\/uploads\/sites\/3\/2024\/10\/blog_2918.jpg\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"blog_2918\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6NDEyMzQsInVybCI6Imh0dHBzOlwvXC9xdWlrZS5pdFwvZXNcL3dwLWNvbnRlbnRcL3VwbG9hZHNcL3NpdGVzXC8zXC8yMDI0XC8xMFwvYmxvZ18yOTE4LmpwZyJ9\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"992\" height=\"642\" src=\"https:\/\/quike.it\/es\/wp-content\/uploads\/sites\/3\/2024\/10\/blog_2918.jpg\" class=\"attachment-full size-full wp-image-41234\" alt=\"Resumen del flujo de ataque de Perfctl. Fuente: Aqua Nautilus.\" srcset=\"https:\/\/quike.it\/es\/wp-content\/uploads\/sites\/3\/2024\/10\/blog_2918.jpg 992w, https:\/\/quike.it\/es\/wp-content\/uploads\/sites\/3\/2024\/10\/blog_2918-300x194.jpg 300w, https:\/\/quike.it\/es\/wp-content\/uploads\/sites\/3\/2024\/10\/blog_2918-768x497.jpg 768w\" sizes=\"(max-width: 992px) 100vw, 992px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t<figcaption class=\"widget-image-caption wp-caption-text\"><\/figcaption>\n\t\t\t\t\t\t\t\t\t\t<\/figure>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5bb3c13 elementor-widget elementor-widget-text-editor\" data-id=\"5bb3c13\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>El <em><strong>criptominero<\/strong><\/em> se conecta a los grupos de miner\u00eda a trav\u00e9s de la <strong><a href=\"https:\/\/quike.it\/es\/como-instalar-el-navegador-tor-en-ubuntu-23-10\/\" target=\"_blank\" rel=\"noopener\">red TOR<\/a>,<\/strong> lo que oculta el tr\u00e1fico y dificulta el rastreo de las ganancias generadas.<\/p><p>En algunos casos, <strong>Aqua Nautilus<\/strong> tambi\u00e9n ha identificado la implementaci\u00f3n de software de <strong>proxy-jacking,<\/strong> que proporciona a los atacantes una fuente adicional de ingresos al vender el ancho de banda no utilizado a trav\u00e9s de servicios como <strong>Bitping, Repocket, Speedshare,<\/strong> entre otros.<\/p><p>La mayor\u00eda de los usuarios sospechan que sus servidores est\u00e1n comprometidos al notar un <a href=\"https:\/\/quike.it\/es\/como-resolver-el-uso-de-disco-al-100-en-windows-10\/\" target=\"_blank\" rel=\"noopener\"><strong>uso del 100% de la CPU<\/strong><\/a>, causado por la <a href=\"https:\/\/es.wikipedia.org\/wiki\/Criptomoneda#Minado\" target=\"_blank\" rel=\"noopener\"><strong>miner\u00eda<\/strong><\/a> de <strong>criptomonedas.<\/strong><\/p><p>No obstante, el <strong>malware<\/strong> es altamente evasivo: detiene la actividad minera en cuanto un usuario inicia sesi\u00f3n en el servidor, esperando hasta que el sistema vuelva a estar inactivo para reanudar sus operaciones.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-dbe8332 elementor-blockquote--skin-border elementor-widget elementor-widget-blockquote\" data-id=\"dbe8332\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"blockquote.default\">\n\t\t\t\t\t\t\t<blockquote class=\"elementor-blockquote\">\n\t\t\t<p class=\"elementor-blockquote__content\">\n\t\t\t\tSolo me percat\u00e9 del malware porque mi sistema de monitoreo me alert\u00f3 sobre el uso del 100% de la CPU. El proceso se deten\u00eda inmediatamente cuando me conectaba v\u00eda SSH o consola, pero en cuanto cerraba sesi\u00f3n, el malware volv\u00eda a ejecutarse en cuesti\u00f3n de segundos o minutos.\t\t\t<\/p>\n\t\t\t\t\t\t\t<div class=\"e-q-footer\">\n\t\t\t\t\t\t\t\t\t\t\t<cite class=\"elementor-blockquote__author\">Usuario en Reddit<\/cite>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/blockquote>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f294ddc elementor-widget elementor-widget-text-editor\" data-id=\"f294ddc\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>El uso de <a href=\"https:\/\/es.wikipedia.org\/wiki\/Rootkit\" target=\"_blank\" rel=\"noopener\"><strong>rootkits<\/strong><\/a> dificulta a\u00fan m\u00e1s su detecci\u00f3n y eliminaci\u00f3n, ya que los procesos del <strong>malware<\/strong> quedan ocultos a las herramientas de monitoreo convencionales, lo que obliga a los usuarios a desconectar el equipo o arrancarlo desde un <strong>CD<\/strong> en vivo para inspeccionar el sistema de archivos.<\/p><p>Dado que la infecci\u00f3n modifica y reemplaza archivos leg\u00edtimos del sistema <strong>Linux,<\/strong> la recomendaci\u00f3n m\u00e1s eficaz es formatear y reinstalar el dispositivo para asegurar la completa <strong><a href=\"https:\/\/quike.it\/es\/como-eliminar-malware-de-tu-computadora\/\" target=\"_blank\" rel=\"noopener\">eliminaci\u00f3n del malware<\/a>.<\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c26520d elementor-widget elementor-widget-heading\" data-id=\"c26520d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Detectar y detener perfctl<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d8fa570 elementor-widget elementor-widget-text-editor\" data-id=\"d8fa570\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p><strong>Aqua Nautilus<\/strong> propone diversas estrategias para detectar y neutralizar <span style=\"color: #800000;\"><strong>perfctl,<\/strong><\/span> organizadas en cuatro categor\u00edas principales: monitoreo del sistema, an\u00e1lisis del tr\u00e1fico de red, supervisi\u00f3n de la integridad de archivos y procesos, y mitigaci\u00f3n proactiva.<\/p><p>En cuanto a la detecci\u00f3n, <strong>Aqua Nautilus<\/strong> ofrece los siguientes consejos:<\/p><ul><li><strong>Inspeccionar regularmente<\/strong> los directorios <strong><code>\/tmp<\/code>, <code>\/usr<\/code><\/strong> y <strong><code>\/root<\/code><\/strong> en busca de binarios sospechosos que se hagan pasar por archivos leg\u00edtimos del sistema.<\/li><li><strong>Monitorear el uso de la CPU<\/strong> para identificar picos y procesos como <strong><code>httpd<\/code><\/strong> y <strong><code>sh<\/code><\/strong> que se ejecutan desde ubicaciones inesperadas.<\/li><li><strong>Examinar archivos<\/strong> como <strong><code>~\/.profile<\/code>, <code>~\/.bashrc<\/code><\/strong> y <strong><code>\/etc\/ld.so.preload<\/code><\/strong> en busca de modificaciones no autorizadas.<\/li><li><strong>Capturar y analizar el tr\u00e1fico de red<\/strong> en busca de conexiones basadas en <strong>TOR<\/strong> a <a href=\"https:\/\/quike.it\/es\/como-se-asigna-la-ip-publica-cuando-nos-conectamos-a-internet\/\" target=\"_blank\" rel=\"noopener\"><strong>direcciones IP<\/strong><\/a> externas.<\/li><li><strong>Buscar conexiones salientes<\/strong> a grupos de <em><strong>criptominer\u00eda<\/strong><\/em> conocidos o servicios de <em><strong>proxy-jacking.<\/strong><\/em><\/li><li><strong>Agregar las IPs listadas<\/strong> en la secci\u00f3n de <a href=\"https:\/\/es.wikipedia.org\/wiki\/Indicador_de_compromiso\" target=\"_blank\" rel=\"noopener\"><strong>Indicadores de Compromiso<\/strong><\/a> <em>(<strong>IoC<\/strong>)<\/em> del informe a una lista negra para interrumpir las comunicaciones con <strong><em>hosts<\/em><\/strong> maliciosos.<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-79b063b elementor-widget elementor-widget-text-editor\" data-id=\"79b063b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>Adem\u00e1s, se recomienda a los administradores de sistemas que solucionen todas las vulnerabilidades conocidas en las aplicaciones que permiten acceso a Internet, como los servidores <strong>RocketMQ<\/strong> (<strong><em>CVE-2023-33246<\/em><\/strong>) y <strong>Polkit<\/strong> (<strong><em>CVE-2021-4034<\/em><\/strong>).<\/p><p>Por \u00faltimo, es recomendable desactivar servicios <strong>HTTP<\/strong> no utilizados, implementar controles de acceso basados en roles y aplicar la opci\u00f3n <em><strong>\u00abnoexec\u00bb<\/strong><\/em> en directorios cr\u00edticos como <strong><code>\/tmp<\/code><\/strong> y <strong><code>\/dev\/shm<\/code>.<\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Un malware conocido como \u00abperfctl\u00bb ha estado atacando servidores y estaciones de trabajo Linux durante al menos tres a\u00f1os, logrando pasar en gran medida desapercibido gracias a sus avanzadas t\u00e9cnicas de evasi\u00f3n y el uso de rootkits. De acuerdo con los investigadores de Aqua Nautilus, quienes descubrieron este malware, se estima que perfctl ha comprometido [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":41225,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"footnotes":""},"categories":[26,89],"tags":[],"class_list":["post-41223","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-linux","category-seguridad"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.5 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Malware &quot;perfctl&quot; utiliza Linux en Operaci\u00f3n de Criptominer\u00eda<\/title>\n<meta name=\"description\" content=\"Un malware conocido como &quot;perfctl&quot; ha estado atacando servidores y estaciones de trabajo Linux durante al menos tres a\u00f1os, logrando pasar...\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/quike.it\/es\/malware-perfctl-utiliza-linux-en-operacion-de-criptomineria\/\" \/>\n<meta property=\"og:locale\" content=\"es_ES\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Malware &quot;perfctl&quot; utiliza Linux en Operaci\u00f3n de Criptominer\u00eda\" \/>\n<meta property=\"og:description\" content=\"Un malware conocido como &quot;perfctl&quot; ha estado atacando servidores y estaciones de trabajo Linux durante al menos tres a\u00f1os, logrando pasar...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/quike.it\/es\/malware-perfctl-utiliza-linux-en-operacion-de-criptomineria\/\" \/>\n<meta property=\"og:site_name\" content=\"El BLOG de Enrique V\u00e1squez B.\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/zeven.sa.1\" \/>\n<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/zeven.sa.1\" \/>\n<meta property=\"article:published_time\" content=\"2024-10-04T13:55:47+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/quike.it\/es\/wp-content\/uploads\/sites\/3\/2024\/10\/Linux_Hacking.jpeg\" \/>\n\t<meta property=\"og:image:width\" content=\"1792\" \/>\n\t<meta property=\"og:image:height\" content=\"1024\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Enrique V\u00e1squez B.\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@quike1974\" \/>\n<meta name=\"twitter:site\" content=\"@quike1974\" \/>\n<meta name=\"twitter:label1\" content=\"Escrito por\" \/>\n\t<meta name=\"twitter:data1\" content=\"Enrique V\u00e1squez B.\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tiempo de lectura\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/quike.it\\\/es\\\/malware-perfctl-utiliza-linux-en-operacion-de-criptomineria\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/quike.it\\\/es\\\/malware-perfctl-utiliza-linux-en-operacion-de-criptomineria\\\/\"},\"author\":{\"name\":\"Enrique V\u00e1squez B.\",\"@id\":\"https:\\\/\\\/quike.it\\\/es\\\/#\\\/schema\\\/person\\\/e53c62e8ab2e3f878e77d3a617483cc8\"},\"headline\":\"Malware \u00abperfctl\u00bb utiliza Linux en Operaci\u00f3n de Criptominer\u00eda\",\"datePublished\":\"2024-10-04T13:55:47+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/quike.it\\\/es\\\/malware-perfctl-utiliza-linux-en-operacion-de-criptomineria\\\/\"},\"wordCount\":877,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/quike.it\\\/es\\\/#\\\/schema\\\/person\\\/e53c62e8ab2e3f878e77d3a617483cc8\"},\"image\":{\"@id\":\"https:\\\/\\\/quike.it\\\/es\\\/malware-perfctl-utiliza-linux-en-operacion-de-criptomineria\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/quike.it\\\/es\\\/wp-content\\\/uploads\\\/sites\\\/3\\\/2024\\\/10\\\/Linux_Hacking.jpeg\",\"articleSection\":[\"Linux\",\"Seguridad\"],\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/quike.it\\\/es\\\/malware-perfctl-utiliza-linux-en-operacion-de-criptomineria\\\/#respond\"]}]},{\"@type\":[\"WebPage\",\"ItemPage\"],\"@id\":\"https:\\\/\\\/quike.it\\\/es\\\/malware-perfctl-utiliza-linux-en-operacion-de-criptomineria\\\/\",\"url\":\"https:\\\/\\\/quike.it\\\/es\\\/malware-perfctl-utiliza-linux-en-operacion-de-criptomineria\\\/\",\"name\":\"Malware \\\"perfctl\\\" utiliza Linux en Operaci\u00f3n de Criptominer\u00eda\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/quike.it\\\/es\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/quike.it\\\/es\\\/malware-perfctl-utiliza-linux-en-operacion-de-criptomineria\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/quike.it\\\/es\\\/malware-perfctl-utiliza-linux-en-operacion-de-criptomineria\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/quike.it\\\/es\\\/wp-content\\\/uploads\\\/sites\\\/3\\\/2024\\\/10\\\/Linux_Hacking.jpeg\",\"datePublished\":\"2024-10-04T13:55:47+00:00\",\"description\":\"Un malware conocido como \\\"perfctl\\\" ha estado atacando servidores y estaciones de trabajo Linux durante al menos tres a\u00f1os, logrando pasar...\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/quike.it\\\/es\\\/malware-perfctl-utiliza-linux-en-operacion-de-criptomineria\\\/#breadcrumb\"},\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/quike.it\\\/es\\\/malware-perfctl-utiliza-linux-en-operacion-de-criptomineria\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/quike.it\\\/es\\\/malware-perfctl-utiliza-linux-en-operacion-de-criptomineria\\\/#primaryimage\",\"url\":\"https:\\\/\\\/quike.it\\\/es\\\/wp-content\\\/uploads\\\/sites\\\/3\\\/2024\\\/10\\\/Linux_Hacking.jpeg\",\"contentUrl\":\"https:\\\/\\\/quike.it\\\/es\\\/wp-content\\\/uploads\\\/sites\\\/3\\\/2024\\\/10\\\/Linux_Hacking.jpeg\",\"width\":1792,\"height\":1024},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/quike.it\\\/es\\\/malware-perfctl-utiliza-linux-en-operacion-de-criptomineria\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Inicio\",\"item\":\"https:\\\/\\\/quike.it\\\/es\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Inform\u00e1tica\",\"item\":\"https:\\\/\\\/quike.it\\\/es\\\/category\\\/informatica\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Seguridad\",\"item\":\"https:\\\/\\\/quike.it\\\/es\\\/category\\\/informatica\\\/seguridad\\\/\"},{\"@type\":\"ListItem\",\"position\":4,\"name\":\"Malware &#8220;perfctl&#8221; utiliza Linux en Operaci\u00f3n de Criptominer\u00eda\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/quike.it\\\/es\\\/#website\",\"url\":\"https:\\\/\\\/quike.it\\\/es\\\/\",\"name\":\"El BLOG de Enrique V\u00e1squez B.\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/quike.it\\\/es\\\/#\\\/schema\\\/person\\\/e53c62e8ab2e3f878e77d3a617483cc8\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/quike.it\\\/es\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"es\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\\\/\\\/quike.it\\\/es\\\/#\\\/schema\\\/person\\\/e53c62e8ab2e3f878e77d3a617483cc8\",\"name\":\"Enrique V\u00e1squez B.\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/quike.it\\\/es\\\/wp-content\\\/uploads\\\/sites\\\/3\\\/2021\\\/02\\\/me.png\",\"url\":\"https:\\\/\\\/quike.it\\\/es\\\/wp-content\\\/uploads\\\/sites\\\/3\\\/2021\\\/02\\\/me.png\",\"contentUrl\":\"https:\\\/\\\/quike.it\\\/es\\\/wp-content\\\/uploads\\\/sites\\\/3\\\/2021\\\/02\\\/me.png\",\"width\":512,\"height\":512,\"caption\":\"Enrique V\u00e1squez B.\"},\"logo\":{\"@id\":\"https:\\\/\\\/quike.it\\\/es\\\/wp-content\\\/uploads\\\/sites\\\/3\\\/2021\\\/02\\\/me.png\"},\"description\":\"Programador desde 1988, con pasi\u00f3n por escribir art\u00edculos de todo tipo. Actualmente desarrolla para ZEVEN S.A. el Sistema de Facturaci\u00f3n Electr\u00f3nica. Ecuatoriano de nacimiento e italiano de residencia, escribe desde G\u00e9nova, ciudad que ha llegado a amar tanto como su natal Guayaquil. Padre de dos hijos que son su orgullo y esposo de una mujer excepcional.\",\"sameAs\":[\"https:\\\/\\\/quike.it\",\"https:\\\/\\\/www.facebook.com\\\/zeven.sa.1\",\"https:\\\/\\\/www.instagram.com\\\/quikev1974\",\"https:\\\/\\\/www.linkedin.com\\\/in\\\/carlos-enrique-vasquez-bautista-074893b\\\/\",\"https:\\\/\\\/x.com\\\/quike1974\"],\"url\":\"https:\\\/\\\/quike.it\\\/es\\\/author\\\/quike\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Malware \"perfctl\" utiliza Linux en Operaci\u00f3n de Criptominer\u00eda","description":"Un malware conocido como \"perfctl\" ha estado atacando servidores y estaciones de trabajo Linux durante al menos tres a\u00f1os, logrando pasar...","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/quike.it\/es\/malware-perfctl-utiliza-linux-en-operacion-de-criptomineria\/","og_locale":"es_ES","og_type":"article","og_title":"Malware \"perfctl\" utiliza Linux en Operaci\u00f3n de Criptominer\u00eda","og_description":"Un malware conocido como \"perfctl\" ha estado atacando servidores y estaciones de trabajo Linux durante al menos tres a\u00f1os, logrando pasar...","og_url":"https:\/\/quike.it\/es\/malware-perfctl-utiliza-linux-en-operacion-de-criptomineria\/","og_site_name":"El BLOG de Enrique V\u00e1squez B.","article_publisher":"https:\/\/www.facebook.com\/zeven.sa.1","article_author":"https:\/\/www.facebook.com\/zeven.sa.1","article_published_time":"2024-10-04T13:55:47+00:00","og_image":[{"width":1792,"height":1024,"url":"https:\/\/quike.it\/es\/wp-content\/uploads\/sites\/3\/2024\/10\/Linux_Hacking.jpeg","type":"image\/jpeg"}],"author":"Enrique V\u00e1squez B.","twitter_card":"summary_large_image","twitter_creator":"@quike1974","twitter_site":"@quike1974","twitter_misc":{"Escrito por":"Enrique V\u00e1squez B.","Tiempo de lectura":"5 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/quike.it\/es\/malware-perfctl-utiliza-linux-en-operacion-de-criptomineria\/#article","isPartOf":{"@id":"https:\/\/quike.it\/es\/malware-perfctl-utiliza-linux-en-operacion-de-criptomineria\/"},"author":{"name":"Enrique V\u00e1squez B.","@id":"https:\/\/quike.it\/es\/#\/schema\/person\/e53c62e8ab2e3f878e77d3a617483cc8"},"headline":"Malware \u00abperfctl\u00bb utiliza Linux en Operaci\u00f3n de Criptominer\u00eda","datePublished":"2024-10-04T13:55:47+00:00","mainEntityOfPage":{"@id":"https:\/\/quike.it\/es\/malware-perfctl-utiliza-linux-en-operacion-de-criptomineria\/"},"wordCount":877,"commentCount":0,"publisher":{"@id":"https:\/\/quike.it\/es\/#\/schema\/person\/e53c62e8ab2e3f878e77d3a617483cc8"},"image":{"@id":"https:\/\/quike.it\/es\/malware-perfctl-utiliza-linux-en-operacion-de-criptomineria\/#primaryimage"},"thumbnailUrl":"https:\/\/quike.it\/es\/wp-content\/uploads\/sites\/3\/2024\/10\/Linux_Hacking.jpeg","articleSection":["Linux","Seguridad"],"inLanguage":"es","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/quike.it\/es\/malware-perfctl-utiliza-linux-en-operacion-de-criptomineria\/#respond"]}]},{"@type":["WebPage","ItemPage"],"@id":"https:\/\/quike.it\/es\/malware-perfctl-utiliza-linux-en-operacion-de-criptomineria\/","url":"https:\/\/quike.it\/es\/malware-perfctl-utiliza-linux-en-operacion-de-criptomineria\/","name":"Malware \"perfctl\" utiliza Linux en Operaci\u00f3n de Criptominer\u00eda","isPartOf":{"@id":"https:\/\/quike.it\/es\/#website"},"primaryImageOfPage":{"@id":"https:\/\/quike.it\/es\/malware-perfctl-utiliza-linux-en-operacion-de-criptomineria\/#primaryimage"},"image":{"@id":"https:\/\/quike.it\/es\/malware-perfctl-utiliza-linux-en-operacion-de-criptomineria\/#primaryimage"},"thumbnailUrl":"https:\/\/quike.it\/es\/wp-content\/uploads\/sites\/3\/2024\/10\/Linux_Hacking.jpeg","datePublished":"2024-10-04T13:55:47+00:00","description":"Un malware conocido como \"perfctl\" ha estado atacando servidores y estaciones de trabajo Linux durante al menos tres a\u00f1os, logrando pasar...","breadcrumb":{"@id":"https:\/\/quike.it\/es\/malware-perfctl-utiliza-linux-en-operacion-de-criptomineria\/#breadcrumb"},"inLanguage":"es","potentialAction":[{"@type":"ReadAction","target":["https:\/\/quike.it\/es\/malware-perfctl-utiliza-linux-en-operacion-de-criptomineria\/"]}]},{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/quike.it\/es\/malware-perfctl-utiliza-linux-en-operacion-de-criptomineria\/#primaryimage","url":"https:\/\/quike.it\/es\/wp-content\/uploads\/sites\/3\/2024\/10\/Linux_Hacking.jpeg","contentUrl":"https:\/\/quike.it\/es\/wp-content\/uploads\/sites\/3\/2024\/10\/Linux_Hacking.jpeg","width":1792,"height":1024},{"@type":"BreadcrumbList","@id":"https:\/\/quike.it\/es\/malware-perfctl-utiliza-linux-en-operacion-de-criptomineria\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Inicio","item":"https:\/\/quike.it\/es\/"},{"@type":"ListItem","position":2,"name":"Inform\u00e1tica","item":"https:\/\/quike.it\/es\/category\/informatica\/"},{"@type":"ListItem","position":3,"name":"Seguridad","item":"https:\/\/quike.it\/es\/category\/informatica\/seguridad\/"},{"@type":"ListItem","position":4,"name":"Malware &#8220;perfctl&#8221; utiliza Linux en Operaci\u00f3n de Criptominer\u00eda"}]},{"@type":"WebSite","@id":"https:\/\/quike.it\/es\/#website","url":"https:\/\/quike.it\/es\/","name":"El BLOG de Enrique V\u00e1squez B.","description":"","publisher":{"@id":"https:\/\/quike.it\/es\/#\/schema\/person\/e53c62e8ab2e3f878e77d3a617483cc8"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/quike.it\/es\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"es"},{"@type":["Person","Organization"],"@id":"https:\/\/quike.it\/es\/#\/schema\/person\/e53c62e8ab2e3f878e77d3a617483cc8","name":"Enrique V\u00e1squez B.","image":{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/quike.it\/es\/wp-content\/uploads\/sites\/3\/2021\/02\/me.png","url":"https:\/\/quike.it\/es\/wp-content\/uploads\/sites\/3\/2021\/02\/me.png","contentUrl":"https:\/\/quike.it\/es\/wp-content\/uploads\/sites\/3\/2021\/02\/me.png","width":512,"height":512,"caption":"Enrique V\u00e1squez B."},"logo":{"@id":"https:\/\/quike.it\/es\/wp-content\/uploads\/sites\/3\/2021\/02\/me.png"},"description":"Programador desde 1988, con pasi\u00f3n por escribir art\u00edculos de todo tipo. Actualmente desarrolla para ZEVEN S.A. el Sistema de Facturaci\u00f3n Electr\u00f3nica. Ecuatoriano de nacimiento e italiano de residencia, escribe desde G\u00e9nova, ciudad que ha llegado a amar tanto como su natal Guayaquil. Padre de dos hijos que son su orgullo y esposo de una mujer excepcional.","sameAs":["https:\/\/quike.it","https:\/\/www.facebook.com\/zeven.sa.1","https:\/\/www.instagram.com\/quikev1974","https:\/\/www.linkedin.com\/in\/carlos-enrique-vasquez-bautista-074893b\/","https:\/\/x.com\/quike1974"],"url":"https:\/\/quike.it\/es\/author\/quike\/"}]}},"_links":{"self":[{"href":"https:\/\/quike.it\/es\/wp-json\/wp\/v2\/posts\/41223","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/quike.it\/es\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/quike.it\/es\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/quike.it\/es\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/quike.it\/es\/wp-json\/wp\/v2\/comments?post=41223"}],"version-history":[{"count":30,"href":"https:\/\/quike.it\/es\/wp-json\/wp\/v2\/posts\/41223\/revisions"}],"predecessor-version":[{"id":41258,"href":"https:\/\/quike.it\/es\/wp-json\/wp\/v2\/posts\/41223\/revisions\/41258"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/quike.it\/es\/wp-json\/wp\/v2\/media\/41225"}],"wp:attachment":[{"href":"https:\/\/quike.it\/es\/wp-json\/wp\/v2\/media?parent=41223"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/quike.it\/es\/wp-json\/wp\/v2\/categories?post=41223"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/quike.it\/es\/wp-json\/wp\/v2\/tags?post=41223"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}