Operation Windigo – large Linux credential stealing malware campaign [pdf](welivesecurity.com)

http://www.welivesecurity.com/wp-content/uploads/2014/03/operation_windigo.pdf