Linux/Cdorked.A malware (backdoor) has been detected recently. It is known to affect Apache, nginx & Lighttpd web servers. Detailed analysis can be found here and is continued here.
It is also worth to note another Linux malware (rootkit) that has been recently found in the wild and was analyzed by CrowdStrike.
