Malware named HiddenWasp has been created specifically designed to target Linux machines. Malware contains a rootkit component that closely resembles Adore-ng rootkit. The malware implants seem to be hosted in servers from a physical server server located in Hong Kong. The open source nature of Linux being matched by a somewhat open source malware in HiddenWasm may start a new trend of having an open source version of malware targeting Linux hosts. Since the user requires typing the root password in order to install software deep into the system, the malware can do is install its rootkit part as a user-level process.”]
Source: https://hackercombat.com/is-this-the-start-of-open-source-malware-for-linux/