The Russian intelligence-linked Fancy Bear group is deploying a new malware called Drovorub against Linux environments as part of a cyber espionage operation, according to US warnings
https://www.computerweekly.com/news/252487658/Russias-Fancy-Bear-targets-Linux-environments-with-Drovorub-malware