May 5, 2015 By Shane Schick 2 min read

It’s easy to hate spammers, but not if they are unwitting victims of cybercrime, like those affected by the recently discovered Mumblehard malware.

ESET researchers first raised awareness about the Mumblehard malware on their blog, We Live Security. The Linux-built malware consists of a back door and a spamming daemon that sends large batches of junk email content. The team reports the botnet has been quietly running on infected machines for more than five years and has doubled in size over the last six months.

The revelations of this security risk could be a blow to the open source community, which has already been reeling from major flaws like 2014’s Heartbleed and Shellshock bugs. As DecryptedTech noted, there has long been a perception among IT professionals that Linux, BSD and similar platforms are more secure than their proprietary counterparts. As more Mumblehard malware is uncovered, that perception may change radically.

In fact, Ars Technica likened Mumblehard malware to Windigo, a spam botnet that was also discovered by ESET researchers and reportedly connected to thousands of Linux servers to spread unsolicited messages. In this case, though, Mumblehard seems more sophisticated because the Perl script it’s based on is concealed in a low-level programming language known as a “packer.” That’s why it may have been running undetected for last half-decade.

Then there’s the rate of infection itself. Experts believe the Mumblehard malware isn’t constantly sending spam but operates more intermittently to avoid drawing attention to itself. According to Help Net Security, it also seems to be associated with Yellsoft, whose DirectMailer system allows customers to send anonymous email messages.

The designer of the Mumblehard malware has been keeping a close watch on platforms that offer easy access. In its coverage of the story, The Register said the botnet takes advantage of content management tools such as Joomla and WordPress, the latter of which has been riddled with security problems in recent months.

The real question, of course, is whether filling up inboxes with spam is the worst of what the Mumblehard malware has to offer or if it also steals data or breaks into admin controls of the machines it infects. Although it managed to stay under the radar for a long time, hopefully it won’t take nearly as long to clean up whatever damage it has caused.

More from

2024 roundup: Top data breach stories and industry trends

3 min read - With 2025 on the horizon, it’s important to reflect on the developments and various setbacks that happened in cybersecurity this past year. While there have been many improvements in security technologies and growing awareness of emerging cybersecurity threats, 2024 was also a hard reminder that the ongoing fight against cyber criminals is far from over.We've summarized this past year's top five data breach stories and industry trends, with key takeaways from each that organizations should note going into the following…

Black Friday chaos: The return of Gozi malware

4 min read - On November 29th, 2024, Black Friday, shoppers flooded online stores to grab the best deals of the year. But while consumers were busy filling their carts, cyber criminals were also seizing the opportunity to exploit the shopping frenzy. Our system detected a significant surge in Gozi malware activity, targeting financial institutions across North America. The Black Friday connection Black Friday creates an ideal environment for cyber criminals to thrive. The combination of skyrocketing transaction volumes, a surge in online activity…

Cloud Threat Landscape Report: AI-generated attacks low for the cloud

2 min read - For the last couple of years, a lot of attention has been placed on the evolutionary state of artificial intelligence (AI) technology and its impact on cybersecurity. In many industries, the risks associated with AI-generated attacks are still present and concerning, especially with the global average of data breach costs increasing by 10% from last year.However, according to the most recent Cloud Threat Landscape Report released by IBM’s X-Force team, the near-term threat of an AI-generated attack targeting cloud computing…

Topic updates

Get email updates and stay ahead of the latest threats to the security landscape, thought leadership and research.
Subscribe today