HACKER Q&A
📣 kosasbest

Best Antivirus for Linux?


I consider myself pretty careful with Ubuntu as my daily driver. I only grab official and signed software from the Snap Store, and do all the usual security best practices like 2FA, regular updates, not opening e-mail attachments, strong passwords etc

But Linux is getting more popular, and is increasingly becoming a target for malware authors. I read some articles recently of sophisticated so called 'fileless' Linux malware that is polymorphic and hard to detect on a system.

Is there any Antivirus for Linux that anyone can recommend (Paid or free) that I can use to do quick sweeps of my system? I don't want some low-hanging fruit virus compromising me, or sophisticated nation state malware, and yes my threat model includes nation states because I'm a sysadmin for my sins and have lots of Intellectual Property I need protecting.

I've heard of ClamAV. I tested it out, but I want something more sophisticated.


  👤 mobilio Accepted Answer ✓
Get ClamAV: https://www.clamav.net and then use some GUI like ClamTK: https://gitlab.com/dave_m/clamtk/

👤 asldkfjasdlfj
snap store doesn't have good review process. you are pretty much running untrusted code with a very leaky containment solution (ubuntu is for works-for-me, not security or consistency)

same for things like mvn, npm, cargo, pip, etc. specially if using github links directly. (heck, even default git and git repos with hidden hooks etc. or containers with FS sharing that can then plan git hooks... so many entry points if you are a developer with trigger happy source download/build)

either trust your code reviewers (a good distro with no shortcuts like the above) or at least use that as a base and run things in a safe containment solution (hint, not docker)

edit: or if you have more wealth than sense, or are a security C-level exec who needs to cover your ass legally, there's crowdStrike and other pits to dump that money.


👤 cpach
Keep in mind that most AV solutions are utter crap. There are extremely few of them that I would recommend.