Tim Brown

### Area Malware reports ### Parent threat _No response_ ### Finding https://www.intezer.com/blog/malware-analysis/hiddenwasp-malware-targeting-linux-systems/ ### Industry reference _No response_ ### Malware reference HiddenWasp ### Actor reference _No response_ ### Component Linux ###...

### Area Supply chain attacks ### Parent threat _No response_ ### Finding https://arstechnica.com/information-technology/2012/09/questions-abound-as-malicious-phpmyadmin-backdoor-found-on-sourceforge-site/ ### Industry reference PHPMyAdmin ### Malware reference _No response_ ### Actor reference _No response_ ### Component _No...

### Area Supply chain attacks ### Parent threat _No response_ ### Finding https://dev.horde.org/h/jonah/stories/view.php?channel_id=1&id=155 ### Industry reference Horde Webmail ### Malware reference _No response_ ### Actor reference _No response_ ### Component...

### Area Malware PoCs ### Parent threat _No response_ ### Finding https://github.com/schrodyn/bad_UDP ### Industry reference _No response_ ### Malware reference _No response_ ### Actor reference _No response_ ### Component Linux...

https://twitter.com/CraigHRowland/status/1628883826738077696

You might like to integrate some of the ideas from there: * https://github.com/CiscoCXSecurity/linikatz

Hi, this is the tracker I use for contributions to MITRE ATT&CK for Linux. Given your interest in Linux forensics, you might find it useful :).