linux-malware
linux-malware copied to clipboard
Tracking interesting Linux (and UNIX) malware. Send PRs
### Area Malware reports ### Parent threat _No response_ ### Finding https://blog.talosintelligence.com/2018/05/VPNFilter.html ### Industry reference VPNFilter ### Malware reference _No response_ ### Actor reference _No response_ ### Component _No response_...
### Area Defensive techniques ### Parent threat _No response_ ### Finding https://github.com/anelshaer/Remote-Linux-Triage-Collection-using-OSquery ### Industry reference _No response_ ### Malware reference _No response_ ### Actor reference _No response_ ### Component Linux...
### Area Malware reports ### Parent threat _No response_ ### Finding https://www.sentinelone.com/labs/the-mystery-of-metador-an-unattributed-threat-hiding-in-telcos-isps-and-universities/ ### Industry reference _No response_ ### Malware reference Metador wltm ### Actor reference _No response_ ### Component Linux...
### Area Supply chain attacks ### Parent threat _No response_ ### Finding https://news.ycombinator.com/item?id=17501379 ### Industry reference _No response_ ### Malware reference _No response_ ### Actor reference _No response_ ### Component...
### Area Supply chain attacks ### Parent threat _No response_ ### Finding https://lists.archlinux.org/pipermail/aur-general/2018-July/034169.html ### Industry reference https://github.com/timb-machine/linux-malware/issues/525 ### Malware reference wltm ### Actor reference _No response_ ### Component Linux ###...
### Area Malware reports ### Parent threat _No response_ ### Finding https://blog.netlab.360.com/an-analysis-of-godlua-backdoor-en/ ### Industry reference GodLua ### Malware reference _No response_ ### Actor reference _No response_ ### Component _No response_...
### Area Malware reports ### Parent threat _No response_ ### Finding https://twitter.com/_larry0/status/1143532888538984448 ### Industry reference Silex ### Malware reference _No response_ ### Actor reference _No response_ ### Component _No response_...
### Area Malware reports ### Parent threat _No response_ ### Finding https://www.cadosecurity.com/post/team-tnt-the-first-crypto-mining-worm-to-steal-aws-credentials ### Industry reference TeamTNT ### Malware reference _No response_ ### Actor reference _No response_ ### Component _No response_...
### Area Supply chain attacks ### Parent threat _No response_ ### Finding https://scarybeastsecurity.blogspot.com/2011/07/alert-vsftpd-download-backdoored.html ### Industry reference VsFTPd ### Malware reference _No response_ ### Actor reference _No response_ ### Component _No...
### Area Malware reports ### Parent threat _No response_ ### Finding https://twitter.com/billyleonard/status/1458531997576572929 ### Industry reference _No response_ ### Malware reference Rekoobe TSH TINYSHELL https://github.com/timb-machine/linux-malware/issues/481 ### Actor reference APT31 ### Component...