Understanding Linux Malware [pdf]
s3.eurecom.fr