#linuxmalware — Public Fediverse posts

Linux Malware Showboat Targets Telecom with SOCKS5 Proxy Backdoor

Meet Showboat, a sneaky Linux malware that's targeting telecom systems with its powerful SOCKS5 proxy backdoor, allowing hackers to spawn remote shells, transfer files, and carry out covert operations. This modular menace can quietly infiltrate and take control, making it a major threat to Linux systems.

https://osintsights.com/linux-malware-showboat-targets-telecom-with-socks5-proxy-backdoor?utm_source=mastodon&utm_medium=social

#LinuxMalware #Socks5ProxyBackdoor #Telecom #ModularPostexploitationFramework #RemoteAccess

Ivanti, Palo Alto Networks Flaws Exploited in Active Attacks

Meet Quasar Linux RAT, a sneaky malware that combines remote access, evasion, and data theft capabilities, making it a potent threat to Linux systems. This powerful tool lets hackers secretly control infected hosts, harvest sensitive info, and even create a network of compromised devices that communicate with each other.

https://osintsights.com/ivanti-palo-alto-networks-flaws-exploited-in-active-attacks?utm_source=mastodon&utm_medium=social

#LinuxMalware #QuasarLinuxRat #RemoteAccessTrojan #KernelRootkit #EmergingThreats

🔐 Un nuovo malware Linux colpisce dove meno te lo aspetti. Proteggere i tuoi dati non è mai stato così fondamentale. #CyberSecurity #LinuxMalware

🔗 https://www.tomshw.it/hardware/malware-linux-sviluppatori-quasar

A sophisticated new Linux Remote Access Trojan (RAT) named QLNX is actively targeting software developers and their DevOps environments, according to Trend Micro. This malware employs advanced techniques like fileless execution, dynamic rootkit compilation, and kernel-level eBPF manipulation to remain virtually undetectable. It specifically targets critical files like `~/.git-credentials` and…

https://www.tpp.blog/2bmmkpl

#cybersecurity #qlnx #linuxmalware

🤖 This post was AI-generated.

Quasar Linux Malware Targets Developers with Stealthy Implant

Meet Quasar Linux, a sneaky new malware targeting developers with a potent blend of stealth, persistence, and credential theft capabilities that can compromise software supply chains. This Linux implant is quietly infiltrating dev and DevOps environments, putting cloud toolchains at risk.

https://osintsights.com/quasar-linux-malware-targets-developers-with-stealthy-implant?utm_source=mastodon&utm_medium=social

#LinuxMalware #QuasarLinux #SupplyChain #DeveloperTools #Devops

GoGra malware's Linux variant is here, and it's a master of disguise. The Harvester group's latest tool leverages Microsoft Graph API and Outlook mailboxes for C2, embedding commands in "Zomato Pizza" emails. This tactic, also seen in their Graphon implant, makes detection a nightmare for defenders.

https://www.tpp.blog/1yu7gud

#cybersecurity #gogra #linuxmalware

🤖 This post was AI-generated.

DKnife is a Linux-based post-compromise framework operating at the router level, enabling adversary-in-the-middle attacks, deep packet inspection, credential harvesting, and malware delivery.

Cisco Talos links the toolkit to a China-nexus threat actor and confirms interaction with ShadowPad and DarkNimbus backdoors. By living on gateway devices, DKnife enables real-time traffic interception and user activity monitoring across endpoints.

Source: https://www.bleepingcomputer.com/news/security/dknife-linux-toolkit-hijacks-router-traffic-to-spy-deliver-malware/

💬 What defensive controls actually work against gateway-resident malware?

🔔 Follow @technadu for threat research and IoC-driven reporting

#InfoSec #ThreatHunting #RouterSecurity #AitM #LinuxMalware #CyberEspionage #ThreatActors #TechNadu

Never-before-seen Linux malware is "more advanced than typical"

https://arstechnica.com/security/2026/01/never-before-seen-linux-malware-is-far-more-advanced-than-typical/

#HackerNews #LinuxMalware #AdvancedThreat #CyberSecurity #TechNews #MalwareDetection #LinuxSecurity

Never-before-seen Linux malware is "more advanced than typical"

https://arstechnica.com/security/2026/01/never-before-seen-linux-malware-is-far-more-advanced-than-typical/

#HackerNews #LinuxMalware #AdvancedThreat #CyberSecurity #TechNews #MalwareDetection #LinuxSecurity

VoidLink is a new cloud-native Linux malware framework with 30+ plugins, adaptive cloud detection, and stealth-focused evasion targeting AWS, Azure, and GCP.

https://www.technadu.com/voidlink-cloud-native-malware-framework-targets-linux-systems-via-custom-plugin-api/618202/

Thoughts on defending cloud Linux workloads?

#Infosec #CloudSecurity #LinuxMalware

Sophisticated Koske Linux Malware Developed With AI Aid https://www.securityweek.com/sophisticated-koske-linux-malware-developed-with-ai-aid/ #Malware&Threats #Linuxmalware #Koske #AI

Sophisticated Koske Linux Malware Developed With AI Aid https://www.securityweek.com/sophisticated-koske-linux-malware-developed-with-ai-aid/ #Malware&Threats #Linuxmalware #Koske #AI

Sophisticated Koske Linux Malware Developed With AI Aid https://www.securityweek.com/sophisticated-koske-linux-malware-developed-with-ai-aid/ #Malware&Threats #Linuxmalware #Koske #AI

Sophisticated Koske Linux Malware Developed With AI Aid https://www.securityweek.com/sophisticated-koske-linux-malware-developed-with-ai-aid/ #Malware&Threats #Linuxmalware #Koske #AI

Prometei Botnet Activity Spikes https://www.securityweek.com/prometei-botnet-activity-spikes/ #Malware&Threats #Linuxmalware #Promotei #malware #botnet

Prometei Botnet Activity Spikes https://www.securityweek.com/prometei-botnet-activity-spikes/ #Malware&Threats #Linuxmalware #Promotei #malware #botnet

Prometei Botnet Activity Spikes https://www.securityweek.com/prometei-botnet-activity-spikes/ #Malware&Threats #Linuxmalware #Promotei #malware #botnet

Prometei Botnet Activity Spikes https://www.securityweek.com/prometei-botnet-activity-spikes/ #Malware&Threats #Linuxmalware #Promotei #malware #botnet

Albabat Ransomware Expands Targets, Abuses GitHub – Source: www.securityweek.com https://ciso2ciso.com/albabat-ransomware-expands-targets-abuses-github-source-www-securityweek-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #securityweekcom #Linuxmalware #macOSmalware #securityweek #ransomware #Albabat

Albabat Ransomware Expands Targets, Abuses GitHub – Source: www.securityweek.com https://ciso2ciso.com/albabat-ransomware-expands-targets-abuses-github-source-www-securityweek-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #securityweekcom #Linuxmalware #macOSmalware #securityweek #ransomware #Albabat

Albabat Ransomware Expands Targets, Abuses GitHub https://www.securityweek.com/albabat-ransomware-expands-targets-abuses-github/ #Linuxmalware #macOSmalware #Ransomware #ransomware #Albabat

Albabat Ransomware Expands Targets, Abuses GitHub https://www.securityweek.com/albabat-ransomware-expands-targets-abuses-github/ #Linuxmalware #macOSmalware #Ransomware #ransomware #Albabat

Albabat Ransomware Expands Targets, Abuses GitHub https://www.securityweek.com/albabat-ransomware-expands-targets-abuses-github/ #Linuxmalware #macOSmalware #Ransomware #ransomware #Albabat

Albabat Ransomware Expands Targets, Abuses GitHub https://www.securityweek.com/albabat-ransomware-expands-targets-abuses-github/ #Linuxmalware #macOSmalware #Ransomware #ransomware #Albabat

A newly discovered Linux malware, Auto-Color, poses significant risks to institutions. Detected by Palo Alto Networks, it grants attackers full remote access to compromised devices, targeting universities and government bodies in North America and Asia. The malware requires user execution and employs innocent file names for evasion, making it hard to remove without specialized tools. Organizations must enhance cybersecurity measures and user awareness to combat this threat. #LinuxMalware

A newly discovered Linux malware, Auto-Color, poses significant risks to institutions. Detected by Palo Alto Networks, it grants attackers full remote access to compromised devices, targeting universities and government bodies in North America and Asia. The malware requires user execution and employs innocent file names for evasion, making it hard to remove without specialized tools. Organizations must enhance cybersecurity measures and user awareness to combat this threat. #LinuxMalware

New ‘Auto-Color’ Linux Malware Targets North America, Asia – Source: www.securityweek.com https://ciso2ciso.com/new-auto-color-linux-malware-targets-north-america-asia-source-www-securityweek-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #Malware&Threats #securityweekcom #Linuxmalware #securityweek #Auto-Color #Malware

New ‘Auto-Color’ Linux Malware Targets North America, Asia – Source: www.securityweek.com https://ciso2ciso.com/new-auto-color-linux-malware-targets-north-america-asia-source-www-securityweek-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #Malware&Threats #securityweekcom #Linuxmalware #securityweek #Auto-Color #Malware

Pumakit – Sophisticated Linux Rootkit That Persist Even After Reboots https://gbhackers.com/pumakit-linux-rootkit-persistence/ #CyberSecurityNews #IncidentResponse #cybersecurity #Linuxmalware #LinuxMalware #Rootkit

Pumakit – Sophisticated Linux Rootkit That Persist Even After Reboots https://gbhackers.com/pumakit-linux-rootkit-persistence/ #CyberSecurityNews #IncidentResponse #cybersecurity #Linuxmalware #LinuxMalware #Rootkit

New Stealthy Linux Malware PUMAKIT With Unique Privilege Escalation Methods https://cybersecuritynews.com/stealthy-linux-malware-pumakit/ #privilegeescalation #CyberSecurityNews #CyberAttackToday #cybersecurity #Linuxmalware #ransomware #Malware #Linux

New Stealthy Linux Malware PUMAKIT With Unique Privilege Escalation Methods https://cybersecuritynews.com/stealthy-linux-malware-pumakit/ #privilegeescalation #CyberSecurityNews #CyberAttackToday #cybersecurity #Linuxmalware #ransomware #Malware #Linux

“Bootkitty” – A First Ever UEFI Bootkit Attack Linux Systems https://gbhackers.com/uefi-bootkit/ #CyberSecurityNews #Linuxmalware #SecurityNews #UEFIBootkit #Linux #News

“Bootkitty” – A First Ever UEFI Bootkit Attack Linux Systems https://gbhackers.com/uefi-bootkit/ #CyberSecurityNews #Linuxmalware #SecurityNews #UEFIBootkit #Linux #News

Rekoobe Backdoor In Open Directories Possibly Attacking TradingView Users https://gbhackers.com/rekoobe-backdoor-tradingview/ #TradingViewTargeting #RekoobeBackdoor #cybersecurity #Linuxmalware #Backdoor

Rekoobe Backdoor In Open Directories Possibly Attacking TradingView Users https://gbhackers.com/rekoobe-backdoor-tradingview/ #TradingViewTargeting #RekoobeBackdoor #cybersecurity #Linuxmalware #Backdoor

Linux Malware perfctl Attacking Millions of Linux Servers https://gbhackers.com/linux-malware-perfctl/ #CyberSecurityNews #cybersecurity #Linuxmalware #Linux

Linux Malware perfctl Attacking Millions of Linux Servers https://gbhackers.com/linux-malware-perfctl/ #CyberSecurityNews #cybersecurity #Linuxmalware #Linux

New Mallox Ransomware Linux Variant Attacking Enterprise Linux Servers https://gbhackers.com/mallox-llinux-ransomware-attacks/ #CyberSecurityNews #cybersecurity #Linuxmalware #LinuxAttacks #Ransomware #ransomware

New Mallox Ransomware Linux Variant Attacking Enterprise Linux Servers https://gbhackers.com/mallox-llinux-ransomware-attacks/ #CyberSecurityNews #cybersecurity #Linuxmalware #LinuxAttacks #Ransomware #ransomware

TeamTNT Hackers Attacking VPS Servers Running CentOS https://gbhackers.com/teamtnt-attacks-centos-vps/ #SSHBruteForceAttack #CyberSecurityNews #Linuxmalware #CyberAttack #CentOSVPS #TeamTNT #Cloud

TeamTNT Hackers Attacking VPS Servers Running CentOS https://gbhackers.com/teamtnt-attacks-centos-vps/ #SSHBruteForceAttack #CyberSecurityNews #Linuxmalware #CyberAttack #CentOSVPS #TeamTNT #Cloud

Hackers Using Supershell Malware To Attack Linux SSH Servers https://gbhackers.com/supershell-malware-linux-attack/ #SupershellMalware #LinuxSSHSecurity #Cryptojacking #Linuxmalware #CyberAttack #Backdoor

Hackers Using Supershell Malware To Attack Linux SSH Servers https://gbhackers.com/supershell-malware-linux-attack/ #SupershellMalware #LinuxSSHSecurity #Cryptojacking #Linuxmalware #CyberAttack #Backdoor

New ‘Hadooken’ Linux Malware Targets WebLogic Servers https://www.securityweek.com/new-hadooken-linux-malware-targets-weblogic-servers/ #Malware&Threats #Linuxmalware #WebLogic #malware

New ‘Hadooken’ Linux Malware Targets WebLogic Servers https://www.securityweek.com/new-hadooken-linux-malware-targets-weblogic-servers/ #Malware&Threats #Linuxmalware #WebLogic #malware

New ‘Hadooken’ Linux Malware Targets WebLogic Servers https://www.securityweek.com/new-hadooken-linux-malware-targets-weblogic-servers/ #Malware&Threats #Linuxmalware #WebLogic #malware

TgRAT Malware Attacking Linux Servers with New Variant https://gbhackers.com/tgrat-malware-attacking-linux-servers/ #CyberSecurityNews #cybersecurity #Linuxmalware #Malware #Linux

AcidPour Malware Attacking Linux Data Storage Devices To Wipe Out Data https://gbhackers.com/acidpour-malware-linux-data-wipe/ #Linuxmalware #CyberAttack #AcidPour #Malware

Play Ransomware’s Linux Variant Attacking VMware ESXi Servers https://gbhackers.com/play-ransomware-esxi-servers/ #CyberSecurityNews #ransomwareattack #cybersecurity #Linuxmalware #Ransomware #VMwareESXi

Hackers Attacking Linux Cloud Servers To Gain Complete Control https://gbhackers.com/hackers-linux-cloud-control-storage/ #CyberSecurityNews #BotnetAttacks #LinuxSecurity #Linuxmalware #CloudMalware #CyberThreats #CyberAttack #Botnet

Diamorphine Rootkit Exploiting Linux Systems In The Wild https://gbhackers.com/diamorphine-rootkit-exploiting-linux-systems/ #VulnerabilityAnalysis #CyberSecurityNews #KernelRootkits #cybersecurity #LinuxSecurity #Linuxmalware #CyberThreats #MagicPackets

l+f: DISGOMOJI - die #LinuxMalware die auf Emojis steht 👊🏻😳☠️​ | Security https://www.heise.de/news/l-f-DISGOMOJI-die-Linux-Malware-die-auf-Emojis-steht-9765024.html

JetBrains Warns of GitHub Plugin that Exposes Access Tokens https://gbhackers.com/jetbrains-github-plugin-flaw/ #CVE/vulnerability #CyberSecurityNews #Linuxmalware #CVE202437051 #GitHubPlugin #IntelliJIDEs #JetBrains #Exploit