A group of cybercriminals have been infecting Linux systems with a file-encrypting ransomware program that the security industry has dubbed Linux.Encoder. A new version of the program also has a flaw that makes decryption possible without paying the ransom. Web server infections don’t require user interaction as on desktop computers where getting users to open rogue email attachments or visit malicious websites are common attack vectors. The hackers use automated scanners to find servers that host vulnerable applications or have weak SSH passwords.”]