There are scheduled task apps under Linux, which can be used to deploy malware.

deny CRON, AT (for older distros) for regular users:

sudo nano /etc/cron.deny
user1
user2
....
user n


sudo nano /etc/at.deny
user1
user2
....
user n


about CRON
https://help.ubuntu.com/community/CronHowto