Bleeping Computer

Defending against malware persistence techniques with Wazuh

Malware persistence techniques enable attackers to maintain access to compromised endpoints despite system reboots, credential changes, or other disruptions. Common methods include altering ...
Bleeping Computer

North Korean hackers exploit React2Shell flaw in EtherRAT malware attacks

A new malware implant called EtherRAT, deployed in a recent React2Shell attack, runs five separate Linux persistence mechanisms and leverages Ethereum smart contracts for communication with the ...
CSOonline

New malware turns Linux systems into P2P attack networks

Researchers found a Linux malware called QLNX that combines P2P networking, rootkits, PAM backdoors, and fileless execution to persist and evade takedowns. Attackers have found a new way to turn Linux ...
Hosted on MSN

Antivirus vendors fail to spot persistent, nasty, stealthy Linux backdoor

Nextron researcher Pierre-Henri Pezier says the company named the malware "Plague" as its deobfuscated code contains the text "Uh. Mr. The Plague, sir? I think we have a hacker" - a line from the 1995 ...
HotHardware

New Quasar Linux Malware Is Stealing Developer Credentials with a Hidden Rootkit

Researchers at Trend Micro have identified a frightening new Linux rootkit, dubbed Quasar Linux (QLNX,) and developers should be especially concerned. Per the report (which we spotted through Bleeping ...
Infosecurity-magazine.com

New Chinese-Made Malware Framework Targets Linux-Based Cloud Environments

A new Linux malware framework linked to Chinese-affiliated actors has been discovered by security researchers at Check Point Research. This highly modular framework, named VoidLink by its developers, ...
CSOonline

AI-forged panda images hide persistent cryptomining malware ‘Koske’

A new malware strain named ‘Koske’ is delivering crypto-mining payloads through dropper files posing as benign panda pictures. According to Aqua Nautilus, the cybersecurity team at Aqua Security, the ...