For decades, the Windows operating system has been the preferred target of most hackers. However, over the past 8 years a number of advanced persistent threats (APTs) have been observed to use Linux malware or Linux-based modules. And given the growing trend of using Linux on both servers and desktops (and in government agencies), threat actors have been driven to targeting the open source operating system.

According to Yury Namestnikov (head of Global Research and Analysis Team for Kaspersky), "Aiming to secure their systems, IT and security departments are using Linux more often than before." Because of that, Namestnikov says, "Threat actors are responding to this with the creation of sophisticated tools that are able to penetrate such systems. We advise cybersecurity experts to take this trend into account and implement additional measures to protect their servers and workstations."

As a result of these heightened attacks, Kaspersky lays out a number of steps Linux sysadmins can take to help protect their systems from APTs. Included in that list admins will find:

• Maintain a list of trusted software sources.
• Do not run binaries or scripts from untrusted sources.
• Employ an effective update procedure.
• Audit systems and check logs for attacks.
• Use 2 Factor Authentication.

Read the Linux APT attacks overview on Securelist.com.