Malware called Linux.Ekoms.1 takes screenshots every 30 seconds and is capable of recording sound. Malware checks for two files related to DropBox or Mozilla Firefox and launches itself from a new directory. The malware takes screenshots in JPEG or BMP format and uploads them to a server over encrypted connection. Researchers admit that the sound-capture functionality does not appear to be being used by the Trojan perhaps indicating that side of its spying is a work in progress. Users should run a full scan of all disk partitions using DrWeb Anti-virus for Linux.”]
Source: https://grahamcluley.com/linux-trojan-takes-screenshots-30-seconds-ability-record-sound/