Linux malware could soon be a thing of the past

(Image credit: Shutterstock / Roman Samborskyi)
Audio player loading…

A new version of popular Linux (opens in new tab) toolkit REMnux is now available to download, equipping security analysts with an improved arsenal of tools with which to scrutinize Linux malware.

Built on Ubuntu (opens in new tab), REMnux has been in circulation for more than 10 years, now in its seventh incarnation. The latest version, REMnux 7, does away with some tools present in previous iterations and also adds a handful of new ones to the roster.

As with previous versions, the new toolkit is configured specifically to minimize friction experienced by malware (opens in new tab) analysts and reverse engineers working to better understand Linux threats.

Linux malware

REMnux 7 is reportedly the product of a full rebuild effort, designed to make it easier for Linux users to propose changes to the package and build tools of their own.

The primary appeal of the security-focused Linux distro (opens in new tab) is that researchers are afforded access to the full breadth of available malware analysis tools, without having to discover, install or configure them.

The hundreds of individual tools that make up the REMnux 7 toolkit allow analysts to investigate potential threats, reverse-engineer malicious code, perform memory forensics, explore network and system interactions, and more.

“I’m very excited about releasing the new version of REMnux,” said Lenny Zeltser, who founded the project and maintains the toolkit.

“I’d like to extend a big thank you to all the authors of the tools that comprise the REMnux distro, without whom we’d be stuck analyzing malware with pen and paper.”

REMnux 7 can be deployed in a number of different ways, depending on preference; it can be used as a virtual appliance, installed as a full-blown Linux distro or run as a Docker container.

Anyone looking to learn more about the latest REMnux version can sign up for an introductory webcast (opens in new tab), hosted by Zeltser himself, set to take place tomorrow at 10:30am EDT/15:30 BST.

Via Bleeping Computer (opens in new tab)

Joel Khalili
News and Features Editor

Joel Khalili is the News and Features Editor at TechRadar Pro, covering cybersecurity, data privacy, cloud, AI, blockchain, internet infrastructure, 5G, data storage and computing. He's responsible for curating our news content, as well as commissioning and producing features on the technologies that are transforming the way the world does business.