Operation Windigo – large Linux credential stealing malware campaign [pdf]
welivesecurity.com