Malware has been found hidden inside an innocuous "waterfall" screen-saver for Gnome. The .deb file was made available on artwork sharing site Gnome-Look.org.

The dodgy screen-saver in question has since been removed from Gnome-look.org.

User conorsulli on the Ubuntuforums.org found out the .deb file installs a script with elevated privileges designed to perform a DDoS attack as well as keep itself updated via downloads.

If you by accident installed this malicious water screen-saver, you can remove the script with this command:

sudo rm -f /usr/bin/Auto.bash /usr/bin/run.bash /etc/profile.d/gnome.sh index.php run.bash && sudo dpkg -r app5552