Hello everybody! I can say I’m a newbie at Linux. Wanted to ask about Linux’ task viewers. On the famous task viewers such as bpytop, htop etc., can viruses hide from them? Excluding the injected codes, can virus & tracker/logger softwares hide from classic task viewers of Linux? Do they show all kinds of services and running tasks?
In general, no. Most malware that runs its own process simply uses some name intended to make you not notice it. But it is possible, in Linux just as in every other operating system that ever existed, to imagine that some unusually sophisticated malware manages to exploit some unknown vulnerability to gain full control of the kernel and then all bets are off, then it would be able to do anything.
in theory, a virus can hide from them if it replaces (or LD_PRELOADs) them with something that filters the virus from its output.
those task viewers will show everything running, except some kernel modules, because they are part of the kernel.
also fast cron jobs will only be visible for a very short time. only while they run. if they run for like 250ms you probably won’t notice them.
No, they cannot. If a process is running on your system, you can see it in htop.
