Linux Malware Detect (LMD), also known as Maldet, is a malware scanner designed primarily for Linux servers and shared hosting environments. It focuses on threats commonly encountered in web hosting accounts, including PHP web shells, malicious scripts, injected code and backdoors.
Traditional antivirus products often concentrate on executable malware and operating system threats. LMD places particular emphasis on malicious files used to compromise websites and maintain unauthorised access to hosting accounts.
The scanner combines several detection techniques and can work alongside ClamAV. It also provides tools for examining recently modified files, monitoring directories and dealing with suspicious content identified during scans.
This is free and open source software.
Key Features
- Five-stage malware detection combining file hashes, HEX patterns, YARA rules, ClamAV and statistical analysis.
- MD5 and SHA-256 hash matching for identifying known malicious files.
- Native YARA scanning with support for custom detection rules and modules.
- Parallel scanning engine designed to reduce the time required to examine large file collections.
- Compound signatures supporting multiple patterns, Boolean logic, case-insensitive matching and wildcards.
- Statistical analysis to help identify obfuscated malicious code, including suspicious base64-encoded content.
- Scan entire directories, recently modified files or files supplied in a list.
- Real-time filesystem monitoring using the Linux inotify subsystem.
- Integration with ModSecurity for inspecting uploaded files.
- Quarantine infected files and restore them with their original ownership and permissions.
- Malware cleaning rules for removing recognised malicious code injections.
- Manage running scans with pause, resume, stop and status controls.
- Automated signature updates and scheduled scans for unattended monitoring.
- Email alerts, SMTP relay support and notifications through Slack, Telegram and Discord.
- Detailed scan reports, logging and configurable exclusions for paths and signatures.
Website: www.rfxn.com/projects/linux-malware-detect
Support:
Developer: Ryan MacDonald
License: GNU General Public License v2.0
LMD is written in Shell.
Related Software
| Anti-Malware Tools | |
|---|---|
| ClamAV | Antivirus engine for detecting trojans, viruses, malware and other threats |
| YARA-X | Re-incarnation of YARA |
| YARA | Pattern matching swiss knife for malware researchers |
| Maltrail | Malicious traffic detection system |
| ClamTk | Graphical frontend for ClamAV |
| LMD | Malware scanner focusing on threats faced in shared hosted environments |
| phpMussel | PHP-based anti-virus anti-trojan anti-malware solution |
| Raspirus | Lightweight signature-based malware scanner |
| FastFinder | Fast suspicious file finder |
| chkrootkit | Locally checks for signs of a rootkit |
| Unhide | Forensic tool to find hidden processes and TCP/UDP ports |
| Atomdrift Scan | Malware and supply chain scanner for software security |
| paranoya | Malware scanner using indicators of compromise and YARA rules |
| decloaker | Security tool for revealing objects concealed by malware |
| Lenspect | Lightweight security threat scanner |
Read our verdict in the software roundup.
 LinuxLinks helps you discover the best free and open source software for Linux. Explore our extensive collection of recommended applications, including alternatives to popular proprietary software.We also publish software reviews, Linux tutorials, hardware reviews, free programming books and articles covering the wider open source community. Browse our Linux resources to discover more. Know a useful free and open source Linux application we haven't covered? Suggest a program for inclusion. Has your software been featured on LinuxLinks? Display one of our Featured on LinuxLinks badges on your website or GitHub README. |
Please read our Comment Policy before commenting.