#rootkit — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #rootkit, aggregated by home.social.
-
OrBit Linux Rootkit Steals SSH and Sudo Credentials
Pulse ID: 6a0b237476e799a5e7a48b8e
Pulse Link: https://otx.alienvault.com/pulse/6a0b237476e799a5e7a48b8e
Pulse Author: cryptocti
Created: 2026-05-18 14:34:28Be advised, this data is unverified and should be considered preliminary. Always do further verification.
#CyberSecurity #InfoSec #Linux #OTX #OpenThreatExchange #Rootkit #SSH #bot #cryptocti
-
OrBit Linux Rootkit Steals SSH and Sudo Credentials
Pulse ID: 6a0b237476e799a5e7a48b8e
Pulse Link: https://otx.alienvault.com/pulse/6a0b237476e799a5e7a48b8e
Pulse Author: cryptocti
Created: 2026-05-18 14:34:28Be advised, this data is unverified and should be considered preliminary. Always do further verification.
#CyberSecurity #InfoSec #Linux #OTX #OpenThreatExchange #Rootkit #SSH #bot #cryptocti
-
OrBit Linux Rootkit Steals SSH and Sudo Credentials
Pulse ID: 6a0b237476e799a5e7a48b8e
Pulse Link: https://otx.alienvault.com/pulse/6a0b237476e799a5e7a48b8e
Pulse Author: cryptocti
Created: 2026-05-18 14:34:28Be advised, this data is unverified and should be considered preliminary. Always do further verification.
#CyberSecurity #InfoSec #Linux #OTX #OpenThreatExchange #Rootkit #SSH #bot #cryptocti
-
OrBit Linux Rootkit Steals SSH and Sudo Credentials
Pulse ID: 6a0b237476e799a5e7a48b8e
Pulse Link: https://otx.alienvault.com/pulse/6a0b237476e799a5e7a48b8e
Pulse Author: cryptocti
Created: 2026-05-18 14:34:28Be advised, this data is unverified and should be considered preliminary. Always do further verification.
#CyberSecurity #InfoSec #Linux #OTX #OpenThreatExchange #Rootkit #SSH #bot #cryptocti
-
OrBit Linux Rootkit Steals SSH and Sudo Credentials
Pulse ID: 6a0b237476e799a5e7a48b8e
Pulse Link: https://otx.alienvault.com/pulse/6a0b237476e799a5e7a48b8e
Pulse Author: cryptocti
Created: 2026-05-18 14:34:28Be advised, this data is unverified and should be considered preliminary. Always do further verification.
#CyberSecurity #InfoSec #Linux #OTX #OpenThreatExchange #Rootkit #SSH #bot #cryptocti
-
Un nuovo malware Linux punta dove fa più male
#quasarlinux è il nuovo nome da tenere d'occhio nel panorama #malware I ricercatori lo descrivono come un impianto modulare per sistemi #linux capace di combinare #backdoor #rootkit e furto di credenziali. Il bersaglio non è un utente generico:sono ambienti DevOps, repository, server di build e macchine che spesso hanno accesso a segreti molto più preziosi di un singolo account
#UnoLinux #gnulinux #gnulinuxitalia #linuxitaliahttps://www.tomshw.it/hardware/malware-linux-sviluppatori-quasar
-
Un nuovo malware Linux punta dove fa più male
#quasarlinux è il nuovo nome da tenere d'occhio nel panorama #malware I ricercatori lo descrivono come un impianto modulare per sistemi #linux capace di combinare #backdoor #rootkit e furto di credenziali. Il bersaglio non è un utente generico:sono ambienti DevOps, repository, server di build e macchine che spesso hanno accesso a segreti molto più preziosi di un singolo account
#UnoLinux #gnulinux #gnulinuxitalia #linuxitaliahttps://www.tomshw.it/hardware/malware-linux-sviluppatori-quasar
-
Un nuovo malware Linux punta dove fa più male
#quasarlinux è il nuovo nome da tenere d'occhio nel panorama #malware I ricercatori lo descrivono come un impianto modulare per sistemi #linux capace di combinare #backdoor #rootkit e furto di credenziali. Il bersaglio non è un utente generico:sono ambienti DevOps, repository, server di build e macchine che spesso hanno accesso a segreti molto più preziosi di un singolo account
#UnoLinux #gnulinux #gnulinuxitalia #linuxitaliahttps://www.tomshw.it/hardware/malware-linux-sviluppatori-quasar
-
Un nuovo malware Linux punta dove fa più male
#quasarlinux è il nuovo nome da tenere d'occhio nel panorama #malware I ricercatori lo descrivono come un impianto modulare per sistemi #linux capace di combinare #backdoor #rootkit e furto di credenziali. Il bersaglio non è un utente generico:sono ambienti DevOps, repository, server di build e macchine che spesso hanno accesso a segreti molto più preziosi di un singolo account
#UnoLinux #gnulinux #gnulinuxitalia #linuxitaliahttps://www.tomshw.it/hardware/malware-linux-sviluppatori-quasar
-
Un nuovo malware Linux punta dove fa più male
#quasarlinux è il nuovo nome da tenere d'occhio nel panorama #malware I ricercatori lo descrivono come un impianto modulare per sistemi #linux capace di combinare #backdoor #rootkit e furto di credenziali. Il bersaglio non è un utente generico:sono ambienti DevOps, repository, server di build e macchine che spesso hanno accesso a segreti molto più preziosi di un singolo account
#UnoLinux #gnulinux #gnulinuxitalia #linuxitaliahttps://www.tomshw.it/hardware/malware-linux-sviluppatori-quasar
-
@buffyleigh @jepyang Those were the days, when Sony tried slipping their #rootkit into their CDs and everybody was like FUCK NO! And they had to back off bc nobody was buying that shit
-
@buffyleigh @jepyang Those were the days, when Sony tried slipping their #rootkit into their CDs and everybody was like FUCK NO! And they had to back off bc nobody was buying that shit
-
@buffyleigh @jepyang Those were the days, when Sony tried slipping their #rootkit into their CDs and everybody was like FUCK NO! And they had to back off bc nobody was buying that shit
-
@buffyleigh @jepyang Those were the days, when Sony tried slipping their #rootkit into their CDs and everybody was like FUCK NO! And they had to back off bc nobody was buying that shit
-
@buffyleigh @jepyang Those were the days, when Sony tried slipping their #rootkit into their CDs and everybody was like FUCK NO! And they had to back off bc nobody was buying that shit
-
Ransomware Actors Broaden Use of EDR Disabling Techniques Beyond Vulnerable Drivers
EDR killers are widely used in ransomware intrusions to turn off security software before attacks, using methods like BYOVD (Bring Your Own Vulnerable Driver), driverless tools, scripts and anti rootkit utilities.
Pulse ID: 69e1166fa36722489928aa73
Pulse Link: https://otx.alienvault.com/pulse/69e1166fa36722489928aa73
Pulse Author: cryptocti
Created: 2026-04-16 17:03:43Be advised, this data is unverified and should be considered preliminary. Always do further verification.
#CyberSecurity #EDR #InfoSec #OTX #OpenThreatExchange #RansomWare #Rootkit #bot #cryptocti
-
CW: ⚠️ WARNING: This package contains REAL malware samples (trojanized APKs, rootkit binaries, bootkit artifacts). Handle in isolated environments only. ZIP password: infected. Do NOT execute on production systems.
https://archive.org/details/android-malware-supply-chain-evidence_mark-castillo-oficial
⚠️ WARNING: Contains REAL malware. Handle in isolated
environments only.ZIP password: infected.
MCO_plus_infected.zip
https://drive.proton.me/urls/0FDQF38VQW#YwuDfZbebG2u🔬 NEW: Android Malware & Supply Chain Evidence — "Mark
Castillo" / MCD Technology Apps (Medellín)
5 trojanized APKs signed with same certificate. C2 via Tor,
exfiltration artifacts, lateral movement to IoT (Fire Stick, TV
Box).
Part of a 6-layer supply chain attack: firmware → boot →
SMM/kernel → OS → .NET → cloud. Google Cloud C2 infrastructure
identified.
📦 Evidence + IOCs + chain of custody:
https://archive.org/details/android-malware-supply-chain-eviden
ce_mark-castillo-oficial
📦 Full forensic toolkit (3354 PE, rootkit analysis):
https://archive.org/details/500ms-supply-chain-verification-too
lkit#infosec, #malware, #supplychain, #DFIR, #threatintel, #android,
#trojan, #C2, #firmware, #rootkit, #bootkit, #UEFI, #IoT,
#whistleblower, #reverseengineering, #incidentresponse, -
CW: ⚠️ WARNING: This package contains REAL malware samples (trojanized APKs, rootkit binaries, bootkit artifacts). Handle in isolated environments only. ZIP password: infected. Do NOT execute on production systems.
https://archive.org/details/android-malware-supply-chain-evidence_mark-castillo-oficial
⚠️ WARNING: Contains REAL malware. Handle in isolated
environments only.ZIP password: infected.
MCO_plus_infected.zip
https://drive.proton.me/urls/0FDQF38VQW#YwuDfZbebG2u🔬 NEW: Android Malware & Supply Chain Evidence — "Mark
Castillo" / MCD Technology Apps (Medellín)
5 trojanized APKs signed with same certificate. C2 via Tor,
exfiltration artifacts, lateral movement to IoT (Fire Stick, TV
Box).
Part of a 6-layer supply chain attack: firmware → boot →
SMM/kernel → OS → .NET → cloud. Google Cloud C2 infrastructure
identified.
📦 Evidence + IOCs + chain of custody:
https://archive.org/details/android-malware-supply-chain-eviden
ce_mark-castillo-oficial
📦 Full forensic toolkit (3354 PE, rootkit analysis):
https://archive.org/details/500ms-supply-chain-verification-too
lkit#infosec, #malware, #supplychain, #DFIR, #threatintel, #android,
#trojan, #C2, #firmware, #rootkit, #bootkit, #UEFI, #IoT,
#whistleblower, #reverseengineering, #incidentresponse, -
https://www.europesays.com/at/82957/ Millionen Android-Geräte mit tückischem Rootkit infiziert #AndroidGeräte #Apps #AT #Austria #Millionen #NoVoice #Operation #Österreich #Rootkit #RootkitKampagne #Science #Science&Technology #Sicherheitslücken #Technik #Technology #Wissenschaft #Wissenschaft&Technik
-
Android-Rootkit „NoVoice“: Über 50 Play-Store-Apps kompromittierten Millionen Geräte
Achtphasiger Angriffsprozess
Die als „Operation NoVoice“ bezeichnete Kampagne nutzte 22 bekannte Sicherheitslücken aus, erlangte Root-Rechte auf betroffenen Geräten und war in der Lage, WhatsApp-Sitzungen vollständig zu klonen.
-
Mensch lädt sich eine "harmlose App" im PlayStore herunter – vielleicht einen SystemCleaner, Taschenrechner oder eine Wettervorhersage. Doch im Hintergrund öffnet sich eine Backdoor, durch die Cyberkriminelle nicht nur die Daten stehlen, sondern die komplette Kontrolle über das Smartphone übernehmen. Genau das passierte jetzt mit dem und durch das „NoVoice"-Rootkit,
Mehr dazu: https://digiprax.maniabel.work/archiv/1168
#novoice #rootkit #infosec #android #Google #PlayStore #up2date
-
Mensch lädt sich eine "harmlose App" im PlayStore herunter – vielleicht einen SystemCleaner, Taschenrechner oder eine Wettervorhersage. Doch im Hintergrund öffnet sich eine Backdoor, durch die Cyberkriminelle nicht nur die Daten stehlen, sondern die komplette Kontrolle über das Smartphone übernehmen. Genau das passierte jetzt mit dem und durch das „NoVoice"-Rootkit,
Mehr dazu: https://digiprax.maniabel.work/archiv/1168
#novoice #rootkit #infosec #android #Google #PlayStore #up2date
-
Mensch lädt sich eine "harmlose App" im PlayStore herunter – vielleicht einen SystemCleaner, Taschenrechner oder eine Wettervorhersage. Doch im Hintergrund öffnet sich eine Backdoor, durch die Cyberkriminelle nicht nur die Daten stehlen, sondern die komplette Kontrolle über das Smartphone übernehmen. Genau das passierte jetzt mit dem und durch das „NoVoice"-Rootkit,
Mehr dazu: https://digiprax.maniabel.work/archiv/1168
#novoice #rootkit #infosec #android #Google #PlayStore #up2date
-
Как работают руткиты и можно ли им противодействовать на примере Singularity
Всем привет. Экспрементируя со способами закрепления на Linux системах в рамках разработки своей системы мониторига безопасности, я наткнулся на руткит с открытым исходным кодом Singularity . Он показался мне очень интересным, так как использует большое количество методов для сокрытия себя от обнаружения, а открытый исходный исходный код позволяет досконально изучить эти методы. В данной статье я подробно расскажу вам, с помощью каких подходов руткиты закрепляются на Linux системах на примере Singularity.
https://habr.com/ru/articles/996568/
#rootkit #rootkits #руткиты #руткит #ядро_linux #мониторинг #ebpf #обнаружение_атак #информационная_безопасность #защита_сервера
-
Как работают руткиты и можно ли им противодействовать на примере Singularity
Всем привет. Экспрементируя со способами закрепления на Linux системах в рамках разработки своей системы мониторига безопасности, я наткнулся на руткит с открытым исходным кодом Singularity . Он показался мне очень интересным, так как использует большое количество методов для сокрытия себя от обнаружения, а открытый исходный исходный код позволяет досконально изучить эти методы. В данной статье я подробно расскажу вам, с помощью каких подходов руткиты закрепляются на Linux системах на примере Singularity.
https://habr.com/ru/articles/996568/
#rootkit #rootkits #руткиты #руткит #ядро_linux #мониторинг #ebpf #обнаружение_атак #информационная_безопасность #защита_сервера
-
Как работают руткиты и можно ли им противодействовать на примере Singularity
Всем привет. Экспрементируя со способами закрепления на Linux системах в рамках разработки своей системы мониторига безопасности, я наткнулся на руткит с открытым исходным кодом Singularity . Он показался мне очень интересным, так как использует большое количество методов для сокрытия себя от обнаружения, а открытый исходный исходный код позволяет досконально изучить эти методы. В данной статье я подробно расскажу вам, с помощью каких подходов руткиты закрепляются на Linux системах на примере Singularity.
https://habr.com/ru/articles/996568/
#rootkit #rootkits #руткиты #руткит #ядро_linux #мониторинг #ebpf #обнаружение_атак #информационная_безопасность #защита_сервера
-
Как работают руткиты и можно ли им противодействовать на примере Singularity
Всем привет. Экспрементируя со способами закрепления на Linux системах в рамках разработки своей системы мониторига безопасности, я наткнулся на руткит с открытым исходным кодом Singularity . Он показался мне очень интересным, так как использует большое количество методов для сокрытия себя от обнаружения, а открытый исходный исходный код позволяет досконально изучить эти методы. В данной статье я подробно расскажу вам, с помощью каких подходов руткиты закрепляются на Linux системах на примере Singularity.
https://habr.com/ru/articles/996568/
#rootkit #rootkits #руткиты #руткит #ядро_linux #мониторинг #ebpf #обнаружение_атак #информационная_безопасность #защита_сервера
-
Questo #rootkit #Linux è open source (e serve a capire perché i sistemi di difesa falliscono)
https://go.squidapp.co/n/iW7sXS9 -
Questo #rootkit #Linux è open source (e serve a capire perché i sistemi di difesa falliscono)
https://go.squidapp.co/n/iW7sXS9 -
Questo #rootkit #Linux è open source (e serve a capire perché i sistemi di difesa falliscono)
https://go.squidapp.co/n/iW7sXS9 -
Questo #rootkit #Linux è open source (e serve a capire perché i sistemi di difesa falliscono)
https://go.squidapp.co/n/iW7sXS9 -
🎉 Ah yes, the revolution we've all been waiting for: a #rootkit for #Linux that lets hackers live their "open-source dreams" too! 🙃 Who wouldn't want to give malicious actors a chance to show off their coding skills in the name of freedom? 🤦♂️ Let's all celebrate with a round of applause for #security nightmares! 👏
https://lwn.net/SubscriberLink/1053099/19c2e8180aeb0438/ #open-source #nightmares #hacking #HackerNews #ngated -
🎉 Ah yes, the revolution we've all been waiting for: a #rootkit for #Linux that lets hackers live their "open-source dreams" too! 🙃 Who wouldn't want to give malicious actors a chance to show off their coding skills in the name of freedom? 🤦♂️ Let's all celebrate with a round of applause for #security nightmares! 👏
https://lwn.net/SubscriberLink/1053099/19c2e8180aeb0438/ #open-source #nightmares #hacking #HackerNews #ngated -
🎉 Ah yes, the revolution we've all been waiting for: a #rootkit for #Linux that lets hackers live their "open-source dreams" too! 🙃 Who wouldn't want to give malicious actors a chance to show off their coding skills in the name of freedom? 🤦♂️ Let's all celebrate with a round of applause for #security nightmares! 👏
https://lwn.net/SubscriberLink/1053099/19c2e8180aeb0438/ #open-source #nightmares #hacking #HackerNews #ngated -
🎉 Ah yes, the revolution we've all been waiting for: a #rootkit for #Linux that lets hackers live their "open-source dreams" too! 🙃 Who wouldn't want to give malicious actors a chance to show off their coding skills in the name of freedom? 🤦♂️ Let's all celebrate with a round of applause for #security nightmares! 👏
https://lwn.net/SubscriberLink/1053099/19c2e8180aeb0438/ #open-source #nightmares #hacking #HackerNews #ngated -
A free and open-source rootkit for Linux
https://lwn.net/SubscriberLink/1053099/19c2e8180aeb0438/
#HackerNews #freeopensource #rootkit #Linux #cybersecurity #open-source
