linux-malware
linux-malware copied to clipboard
timb-machine
Tracking interesting Linux (and UNIX) malware. Send PRs
### Area Defensive techniques ### Parent threat Defense Evasion ### Finding https://www.forensicxlab.com/posts/inodes/ ### Industry reference _No response_ ### Malware reference _No response_ ### Actor reference _No response_ ### Component Linux...
### Area Offensive techniques ### Parent threat Defense Evasion ### Finding https://github.com/akawashiro/sloader ### Industry reference _No response_ ### Malware reference _No response_ ### Actor reference _No response_ ### Component Linux...
### Area Offensive tools ### Parent threat _No response_ ### Finding https://github.com/fireeye/SSSDKCMExtractor ### Industry reference attack:T1558:Steal or Forge Kerberos Tickets ### Malware reference _No response_ ### Actor reference _No response_...
### Area Offensive tools ### Parent threat Credential Access ### Finding https://github.com/blacklanternsecurity/KCMTicketFormatter ### Industry reference attack:T1558:Steal or Forge Kerberos Tickets ### Malware reference _No response_ ### Actor reference _No response_...
### Area Malware reports ### Parent threat _No response_ ### Finding https://www.bitdefender.com/files/News/CaseStudies/study/319/Bitdefender-PR-Whitepaper-DarkNexus-creat4349-en-EN-interactive.pdf ### Industry reference _No response_ ### Malware reference DarkNexus ### Actor reference _No response_ ### Component Linux ###...
### Area Defensive tools ### Parent threat _No response_ ### Finding https://github.com/chriskaliX/Hades ### Industry reference _No response_ ### Malware reference _No response_ ### Actor reference _No response_ ### Component Linux...
### Area Malware reports ### Parent threat Command and Control, Exfiltration ### Finding https://cybersecurity.att.com/blogs/labs-research/internet-of-termites ### Industry reference _No response_ ### Malware reference Termite EarthWorm Earthwrom ### Actor reference _No response_...
### Area Malware reports ### Parent threat _No response_ ### Finding https://sansec.io/research/ecommerce-malware-linux-avp ### Industry reference _No response_ ### Malware reference linux_avp Comma ### Actor reference _No response_ ### Component _No...
### Area Malware reports ### Parent threat Resource Development, Discovery, Command and Control ### Finding https://www.welivesecurity.com/2022/09/14/you-never-walk-alone-sidewalk-backdoor-linux-variant/ ### Industry reference attack:T1587.001:Malware attack:T1016:System Network Configuration Discovery attack:T1071.001:Web Protocols attack:T1573.001:Symmetric Cryptography ### Malware...
### Area Malware reports ### Parent threat _No response_ ### Finding https://blog.netlab.360.com/ghost-in-action-the-specter-botnet/ ### Industry reference _No response_ ### Malware reference Specter SideWalk StageClient ### Actor reference _No response_ ### Component...
Metadata
Owner
Metadata
Tracking interesting Linux (and UNIX) malware. Send PRs