# Significant rise in detected malware on Linux **URL:** \ **Category:** Linux lounge\ **Created:** [July 29, 2022, 9:32am UTC](https://forum.endeavouros.com/t/significant-rise-in-detected-malware-on-linux/29693 "2022-07-29T09:32:29Z")\ **Posts on this page:** 20\ **Page:** 3
**Author:** ![dalto](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/dalto/32/5577_2.png) [@dalto](https://forum.endeavouros.com/u/dalto)\ **Post date:** [July 30, 2022, 12:45pm UTC](https://forum.endeavouros.com/t/significant-rise-in-detected-malware-on-linux/29693/41 "2022-07-30T12:45:50Z")
> [@limotux](#): > > Is that enough? Yes. That means it is running. > [@magtuired](#): > > Would you recommend it over UFW? For most use cases, I prefer firewalld. However, if you are already running ufw and happy with it there probably isn’t any value in switching unless you just like learning new things. I also use ufw in some places. ---
**Author:** ![limotux](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/limotux/32/35347_2.png) [@limotux](https://forum.endeavouros.com/u/limotux)\ **Post date:** [July 30, 2022, 12:46pm UTC](https://forum.endeavouros.com/t/significant-rise-in-detected-malware-on-linux/29693/42 "2022-07-30T12:46:30Z")
> [@magtuired](#): > > my install is old I believe: ```auto yay -Syyu ``` Will do it as if just downloaded and installed the latest! N.B. There is a problem with one of the servers so first do: ```auto eos-rankmirrors ``` then ```auto yay -Syyu ``` I hope this helps. ---
**Author:** ![limotux](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/limotux/32/35347_2.png) [@limotux](https://forum.endeavouros.com/u/limotux)\ **Post date:** [July 30, 2022, 12:49pm UTC](https://forum.endeavouros.com/t/significant-rise-in-detected-malware-on-linux/29693/43 "2022-07-30T12:49:17Z")
> [@dalto](#): > > Yes. That means it is running. > [@dalto](#): > > For most use cases, I prefer firewalld. As far as I understand I have firewalld and it is running. Any other security apps/settings/…? or this is enough? ---
**Author:** ![dalto](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/dalto/32/5577_2.png) [@dalto](https://forum.endeavouros.com/u/dalto)\ **Post date:** [July 30, 2022, 12:52pm UTC](https://forum.endeavouros.com/t/significant-rise-in-detected-malware-on-linux/29693/44 "2022-07-30T12:52:58Z")
> [@limotux](#): > > `yay -Syyu` You don’t need the two "y"s. That wastes mirror bandwidth. Use `yay -Syu` or just `yay`. That being said, updating won’t install firewalld if you didn’t have it already. You probably have it because your install is recent. > [@limotux](#): > > Any other security apps/settings/…? or this is enough? It is a hard question to answer. The concept of “enough” as it relates to security depends very much on your personal use cases, risk tolerance and other factors. Having a firewall is a good start though. You still need to practice generally safe habits when using the internet. I don’t personally run any kind of anti-malware although many people do. I behave pretty cautiously though. Anti-malware is a strangely controversial topic for Linux users. ---
**Author:** ![RokettoPanchi](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/rokettopanchi/32/56756_2.png) [@RokettoPanchi](https://forum.endeavouros.com/u/RokettoPanchi)\ **Post date:** [July 30, 2022, 1:04pm UTC](https://forum.endeavouros.com/t/significant-rise-in-detected-malware-on-linux/29693/45 "2022-07-30T13:04:25Z")
Okay we have identified the issue, what are the solutions? I rather be solution-oriented than harping over the issue. ---
**Author:** ![limotux](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/limotux/32/35347_2.png) [@limotux](https://forum.endeavouros.com/u/limotux)\ **Post date:** [July 30, 2022, 1:08pm UTC](https://forum.endeavouros.com/t/significant-rise-in-detected-malware-on-linux/29693/46 "2022-07-30T13:08:20Z")
> [@dalto](#): > > “enough” as it relates to security depends very much on your personal use cases, risk tolerance Well, for me I am just a home user, browsing (normal websites non suspicious I believe), Libreoffice,… and such. All my data are on the cloud (pCloud for a the bit private data, encrypted 7z for a few) > [@dalto](#): > > I don’t personally run any kind of anti-malware Same here. So I do not really need anything else? No antivirus? P.S. Just to share something, test your firewall and online security [https://www.grc.com/x/ne.dll?bh0bkyd2](https://www.grc.com/x/ne.dll?bh0bkyd2) Update: Text summary of my test, all ports are stealth ```auto ---------------------------------------------------------------------- GRC Port Authority Report created on UTC: 2022-07-30 at 13:13:48 Results from scan of ports: 0-1055 0 Ports Open 0 Ports Closed 1056 Ports Stealth --------------------- 1056 Ports Tested ALL PORTS tested were found to be: STEALTH. TruStealth: PASSED - ALL tested ports were STEALTH, - NO unsolicited packets were received, - NO Ping reply (ICMP Echo) was received. ``` and they mentioned that: Your system has achieved a **perfect** “TruStealth” rating. **Not a single packet** — solicited or otherwise — was received from your system as a result of our security probing tests. Your system ignored and refused to reply to repeated Pings (ICMP Echo Requests). From the standpoint of the passing probes of any hacker, this machine does not exist on the Internet. Some questionable personal security systems expose their users by attempting to “counter-probe the prober”, thus revealing themselves. But your system wisely remained silent in every way. Very nice. ![](https://forum.endeavouros.com/uploads/default/original/3X/a/6/a6a23fc94237b7f00160a818fd6beeb4b835f2a5.gif) ---
**Author:** ![limotux](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/limotux/32/35347_2.png) [@limotux](https://forum.endeavouros.com/u/limotux)\ **Post date:** [July 30, 2022, 1:11pm UTC](https://forum.endeavouros.com/t/significant-rise-in-detected-malware-on-linux/29693/47 "2022-07-30T13:11:53Z")
> [@dalto](#): > > You don’t need the two "y"s. That wastes mirror bandwidth. > > Use `yay -Syu` or just `yay`. I got it somewhere I can not remember. I will take your recommendation to only run with one y, would “yay” only do the same and update/upgrade software and system? ---
**Author:** ![dalto](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/dalto/32/5577_2.png) [@dalto](https://forum.endeavouros.com/u/dalto)\ **Post date:** [July 30, 2022, 1:14pm UTC](https://forum.endeavouros.com/t/significant-rise-in-detected-malware-on-linux/29693/48 "2022-07-30T13:14:29Z")
> [@limotux](#): > > So I do not really need anything else? No antivirus? I can’t answer that for you, it is a personal decision. > [@limotux](#): > > I got it somewhere I can not remember. We started including it in the default install recently. Since your install is relatively new. It includes it. > [@limotux](#): > > I will take your recommendation to only run with one y, would “yay” only do the same and update/upgrade software and system? The difference between `yay -Syu` and `yay` is 4 keystrokes. 😁 They do the exact same thing. ---
**Author:** ![magtuired](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/magtuired/32/12336_2.png) [@magtuired](https://forum.endeavouros.com/u/magtuired)\ **Post date:** [July 30, 2022, 1:15pm UTC](https://forum.endeavouros.com/t/significant-rise-in-detected-malware-on-linux/29693/49 "2022-07-30T13:15:14Z")
> [@limotux](#): > > ```auto > yay -Syyu > > ``` > > I hope this helps. I know how to update, I just mean that when I installed, that package wasn’t part of the system by default. 😛 > [@dalto](#): > > Anti-malware is a strangely controversial topic for Linux users. Security in general is a strangely controversial topic for Linux users. I use Linux because by default it’s more privacy friendly than Windows, but I don’t think it’s wise to ignore when security experts say that Linux has a lot of catch up on in its security model. I wish that Linux users were less defensive and focused on outright rejecting people who point out where it can improve. ---
**Author:** ![limotux](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/limotux/32/35347_2.png) [@limotux](https://forum.endeavouros.com/u/limotux)\ **Post date:** [July 30, 2022, 1:19pm UTC](https://forum.endeavouros.com/t/significant-rise-in-detected-malware-on-linux/29693/50 "2022-07-30T13:19:02Z")
> [@dalto](#): > > 4 keystrokes. 😁 Ouch… that’s too much 🤣 > [@dalto](#): > > I can’t answer that for you, it is a personal decision. I think there is no real threats from viruses on Linux. It is not worth it to install an antivirus (given my usage as I mentioned above) ---
**Author:** ![limotux](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/limotux/32/35347_2.png) [@limotux](https://forum.endeavouros.com/u/limotux)\ **Post date:** [July 30, 2022, 1:23pm UTC](https://forum.endeavouros.com/t/significant-rise-in-detected-malware-on-linux/29693/51 "2022-07-30T13:23:59Z")
> [@magtuired](#): > > wasn’t part of the system by default. 😛 My bad! With all my due respect, I thought because it is a “rolling release” it would be enough to just ```auto yay ``` Saved a lot of keystrokes 🤣 So I have to follow up if there is something new in a new release and install the missing package(s) **Is there a command I can know which version is installed or which ISO? Something that repiles to me “you have Artemis” OR better a command to upgrade the old to the current and install what is missing?** Would [this](https://github.com/bulletmark/arch-upgrade) (arch-upgrade) be the answer to my question? ---
**Author:** ![dalto](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/dalto/32/5577_2.png) [@dalto](https://forum.endeavouros.com/u/dalto)\ **Post date:** [July 30, 2022, 1:57pm UTC](https://forum.endeavouros.com/t/significant-rise-in-detected-malware-on-linux/29693/52 "2022-07-30T13:57:49Z")
> [@limotux](#): > > Is there a command I can know which version is installed or which ISO? Something that repiles to me “you have Artemis” There might be a log somewhere but most of the other strings get updated on existing installs. > [@limotux](#): > > OR better a command to upgrade the old to the current and install what is missing? Not exactly, `eos-packagelist` can show you the current packages being used but I don’t think it is wise to blindly install that list each time. > [@limotux](#): > > Would [this](https://github.com/bulletmark/arch-upgrade) (arch-upgrade) be the answer to my question? No ---
**Author:** ![limotux](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/limotux/32/35347_2.png) [@limotux](https://forum.endeavouros.com/u/limotux)\ **Post date:** [July 30, 2022, 2:04pm UTC](https://forum.endeavouros.com/t/significant-rise-in-detected-malware-on-linux/29693/53 "2022-07-30T14:04:51Z")
Thanks @dalto and @magtuired I am still learning. Just to not be hijacking this thread or being out of topic I created [another thread](https://forum.endeavouros.com/t/upgrade-an-older-install/29733) if you don’t mind. ---
**Author:** ![mrvictory](https://forum.endeavouros.com/letter_avatar_proxy/v4/letter/m/7993a0/32.png) [@mrvictory](https://forum.endeavouros.com/u/mrvictory)\ **Post date:** [July 30, 2022, 2:17pm UTC](https://forum.endeavouros.com/t/significant-rise-in-detected-malware-on-linux/29693/54 "2022-07-30T14:17:24Z")
> [@dalto](#): > > The difference between `yay -Syu` and `yay` is 4 keystrokes. 😁 I counted 5 😛 ---
**Author:** ![NX-01](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/nx-01/32/36098_2.png) [@NX-01](https://forum.endeavouros.com/u/NX-01)\ **Post date:** [July 30, 2022, 3:08pm UTC](https://forum.endeavouros.com/t/significant-rise-in-detected-malware-on-linux/29693/55 "2022-07-30T15:08:29Z")
Isn’t the rise of Linux Malware tied to the WSL? So although it’s Linux Malware it’s still targeting mostly Windows machines? ---
**Author:** ![keybreak](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/keybreak/32/9257_2.png) [@keybreak](https://forum.endeavouros.com/u/keybreak)\ **Post date:** [July 30, 2022, 3:09pm UTC](https://forum.endeavouros.com/t/significant-rise-in-detected-malware-on-linux/29693/56 "2022-07-30T15:09:52Z")
> [@dalto](#): > > 4 keystrokes. 😁 How **DARE** you disrespect greatness of space?! 🤣 ---
**Author:** ![dalto](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/dalto/32/5577_2.png) [@dalto](https://forum.endeavouros.com/u/dalto)\ **Post date:** [July 30, 2022, 3:09pm UTC](https://forum.endeavouros.com/t/significant-rise-in-detected-malware-on-linux/29693/57 "2022-07-30T15:09:56Z")
> [@NX-01](#): > > Isn’t the rise of Linux Malware tied to the WSL? Can you point to data that supports that conclusion? ---
**Author:** ![NX-01](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/nx-01/32/36098_2.png) [@NX-01](https://forum.endeavouros.com/u/NX-01)\ **Post date:** [July 30, 2022, 3:12pm UTC](https://forum.endeavouros.com/t/significant-rise-in-detected-malware-on-linux/29693/58 "2022-07-30T15:12:38Z")
Not instantly, I would need to search also. But I’ve read/heard a lot of news about malware that targets WSL over the last year. ---
**Author:** ![Kresimir](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/kresimir/32/73739_2.png) [@Kresimir](https://forum.endeavouros.com/u/Kresimir)\ **Post date:** [July 30, 2022, 6:10pm UTC](https://forum.endeavouros.com/t/significant-rise-in-detected-malware-on-linux/29693/59 "2022-07-30T18:10:49Z")
> [@limotux](#): > > Is there a command I can know which version is installed or which ISO? Something that repiles to me “you have Artemis” No, because you don’t have Artemis. You have EndeavourOS. “Artemis” is the name of the ISO image from which you installed, but once you update, your system is pretty much the same as my system after I updated, even though I installed EndeavourOS two years ago (we may have different packages installed, of course). Once installed, EndeavourOS does not have a version. ---
**Author:** ![npaladin2000](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/npaladin2000/32/58315_2.png) [@npaladin2000](https://forum.endeavouros.com/u/npaladin2000)\ **Post date:** [July 30, 2022, 7:25pm UTC](https://forum.endeavouros.com/t/significant-rise-in-detected-malware-on-linux/29693/60 "2022-07-30T19:25:56Z")
Personally I preferred the Apollo wallpaper anyway. Then again I’m a fan of the moon misssions. [Previous page](https://forum.endeavouros.com/t/significant-rise-in-detected-malware-on-linux/29693.md?page=2) [Next page](https://forum.endeavouros.com/t/significant-rise-in-detected-malware-on-linux/29693.md?page=4)