Researchers reported that attackers can exploit the 'command-not-found' utility to trick users into installing rogue packages on Ubuntu.