Malicious File Locations

If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

Working...

/tmp/, /var/tmp/, /dev/shm/	Common temp storage for malware
/home/user/.local/, /usr/local/bin/	Can contain malicious binaries
/etc/ld.so.preload	Shared library injection
/lib/modules/	Kernel module insertion
/etc/cron.d/	Malicious scheduled tasks

Announcement