https://cybersecurity.att.com/blogs/labs-research/teamtnt-with-new-campaign-aka-chimaera
There is apparently a Linux component that uses bash and python.
What the article does NOT say is HOW IT GOT THERE
However, I suspect that the CONSTANT POUNDING my ssh port gets (with corresponding Fail2Ban bans and logs) it probably spreads THAT way.
Apparently also affects K8s and (of course) Windows.
--
(aka 'Bombastic Bob' in case you wondered)
'Feeling with my fingers, and thinking with my brain' - me
'your story is so touching, but it sounds just like a lie'
"Straighten up and fly right"
--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)