linux-malware
linux-malware copied to clipboard
[Intel]: https://github.com/snapattack/bpfdoor-scanner
Area
Defensive tools
Parent threat
Persistence, Defense Evasion, Command and Control
Finding
https://github.com/snapattack/bpfdoor-scanner
Industry reference
uses:BPF attack:T1036:Masquerading attack:T1070:Indicator Removal on Host attack:T1205:Traffic Signaling
Malware reference
BPFDoor Tricephalic Hellkeeper Unix.Backdoor.RedMenshen JustForFun
Actor reference
DecisiveArchitect
Component
No response
Scenario
No response
Scenario variation
No response