Malware causing untraceable entries in apache2's error_log

Question

My apache

Server version: Apache/2.4.54 (Ubuntu)
Server built:   2022-06-08T15:59:20

is configured as follows

ErrorLog ${APACHE_LOG_DIR}/error.log
ErrorLogFormat "[%t] [%l] [pid %P] %F: %E: [client %a] %M"
LogLevel warn

However, there are numerous entries in my apache's error.log that don't conform to the format nor indicate their source. How can I determine the culprit?

In particular, something is launching cURL and it results in malware running.

libpng warning: iCCP: known incorrect sRGB profile
libpng warning: Interlace handling should be turned on when using png_read_image
libpng warning: iCCP: known incorrect sRGB profile
libpng warning: Interlace handling should be turned on when using png_read_image
libpng warning: iCCP: known incorrect sRGB profile
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
rm: cannot remove '/var/log/syslog': Permission denied
chattr: Operation not permitted while setting flags on /tmp/
chattr: Operation not permitted while setting flags on /var/tmp/

Malware causing untraceable entries in apache2's error_log

0 Answers0