ESET researchers uncover "WolfsBane," a Linux backdoor linked to the China-based Gelsemium group. This is Gelsemium's first known Linux malware—hinting at a change in attack strategies.
Researchers believe the shift to Linux malware is due to improvements in Windows endpoint security. As a result, threat actors are exploring new attack avenues, increasingly focusing on exploiting flaws in internet-facing systems, most of which run on Linux.
I don‘t get the reasoning here… these servers ran Linux before so what has that to do with Windows endpoints?
These Servers are secured by so much and don't even run out of the box anything, they run entirely custom operating systems based on Linux wich are behind massive Firewalls.