Yeah, (O)OP is such a rookie they probably call it Homework
, which is a well-known trick. The correct stealth strategy is a directory called linux_malware_test_vm_imgs
containing archives such as
clamav_analysis_cumulative.tar
CVE-2022-4907_ffmpeg_backdoor.tar
CVE-2024-3094_xz_backdoor.tar
CVE-2024–2961_php_24yo_chinese_string_insertion.tar
gimp_2022-11-01_trojan.tar
löve2d_hump_bundle.tar
löve2d_pölygamy_crash.tar
löve2d_yaoui.tar
malwarebytes_tarball_anal.tar
qt_vuln_sql_6.3.0.tar
tcp_heading_segment_length_handling_overflow.tar
Back in the 90s I had a Zip disk labeled homework with porn on it. My little brother had a similar disk, but he kept it in his underwear drawer and got caught. Then our dad locked down our AOL accounts. I didn’t find this fair, so I installed a keylogger, grabbed my dad’s password, and unlocked my account.
My parents were not amused when I told them about this 20 years later when I found out my dad was still using the same password for his wifi.