linux-malware icon indicating copy to clipboard operation
linux-malware copied to clipboard

[Intel]: https://github.com/snapattack/bpfdoor-scanner

Open timb-machine opened this issue 3 years ago • 0 comments

Area

Defensive tools

Parent threat

Persistence, Defense Evasion, Command and Control

Finding

https://github.com/snapattack/bpfdoor-scanner

Industry reference

uses:BPF attack:T1036:Masquerading attack:T1070:Indicator Removal on Host attack:T1205:Traffic Signaling

Malware reference

BPFDoor Tricephalic Hellkeeper Unix.Backdoor.RedMenshen JustForFun

Actor reference

DecisiveArchitect

Component

No response

Scenario

No response

Scenario variation

No response

timb-machine avatar May 19 '22 11:05 timb-machine