timb-machine / linux-malware

Tracking interesting Linux (and UNIX) malware. Send PRs

timb-machine/linux-malware Issues

[Intel]: https://sandflysecurity.com/blog/detecting-evasive-linux-backdoors-presentation/
Updated 7 months ago
[Intel]: https://www.microsoft.com/en-us/security/blog/2023/10/25/octo-tempest-crosses-boundaries-to-facilitate-extortion-encryption-and-destruction/
Updated 7 months ago
[Intel]: https://github.com/0xor0ne/debugoff
Updated 9 months ago
[Intel]: https://rushter.com/blog/public-ssh-keys/
Updated 9 months ago
[Intel]: https://github.com/AngelGuyu/spirit
Updated 9 months ago
[Intel]: https://www.reversinglabs.com/blog/gwisinlocker-ransomware-targets-south-korean-industrial-and-pharmaceutical-companies
Updated 9 months ago
[Intel]: https://www.signalblur.io/through-the-looking-glass
Updated 9 months ago
[Intel]: https://blogs.blackberry.com/en/2022/09/the-curious-case-of-monti-ransomware-a-real-world-doppelganger
Closed 9 months ago
[Intel]: https://intel471.com/blog/conti-vs-monti-a-reinvention-or-just-a-simple-rebranding
Closed 9 months ago
[Intel]: https://cybersec84.wordpress.com/2023/08/15/monti-ransomware-operators-resurface-with-new-linux-variant-improved-evasion-tactics/
Updated 9 months ago
[Intel]: https://bazaar.abuse.ch/sample/05e9fe8e9e693cb073ba82096c291145c953ca3a3f8b3974f9c66d15c1a3a11d
Updated 9 months ago
[Intel]: https://blog.talosintelligence.com/lazarus-collectionrat/
Updated 9 months ago
[Intel]: https://github.com/0xrawsec/kunai
Updated 9 months ago
[Intel]: https://github.com/avilum/secimport
Updated 9 months ago
[Intel]: https://github.com/codewhitesec/daphne
Updated 9 months ago
[Intel]: https://github.com/DavidBuchanan314/stelf-loader
Updated 9 months ago
[Intel]: https://github.com/codewhitesec/apollon
Updated 9 months ago
[Intel]: https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/honeypot-recon-new-variant-of-skidmap-targeting-redis/
Updated 9 months ago
[Intel]: https://github.com/hardenedvault/ved-ebpf
Updated 9 months ago
[Intel]: https://blog.trailofbits.com/2023/08/09/use-our-suite-of-ebpf-libraries/
Updated 9 months ago
[Intel]: https://blog.aquasec.com/detecting-ebpf-malware-with-tracee
Updated 9 months ago
[Intel]: https://blog.trailofbits.com/2023/08/09/use-our-suite-of-ebpf-libraries/
Closed 9 months ago
[Intel]: https://blog.trailofbits.com/2021/11/09/all-your-tracing-are-belong-to-bpf/
Updated 9 months ago
[Intel]: https://www.akamai.com/blog/security-research/updated-kmsdbot-binary-targeting-iot
Updated 9 months ago
[Intel]: https://www.cadosecurity.com/redis-p2pinfect/
Updated 9 months ago
[Intel]: https://code-white.com/blog/2023-08-blindsiding-auditd-for-fun-and-profit/
Updated 9 months ago
[Intel]: https://github.com/89luca89/pakkero
Updated 9 months ago
[Intel]: https://github.com/marin-m/vmlinux-to-elf
Updated 9 months ago
[Intel]: https://www.trendmicro.com/en_us/research/23/g/detecting-bpfdoor-backdoor-variants-abusing-bpf-filters.html
Updated 9 months ago
[Intel]: https://hckng.org/articles/perljam-elf64-virus.html
Updated 9 months ago
[Intel]: https://asec.ahnlab.com/en/55785/
Updated 10 months ago
[Intel]: https://www.mitiga.io/blog/mitiga-security-advisory-abusing-the-ssm-agent-as-a-remote-access-trojan
Updated 10 months ago
[Intel]: https://www.cisa.gov/news-events/analysis-reports/ar23-209b
Updated 10 months ago
[Intel]: https://www.cisa.gov/news-events/analysis-reports/ar23-209a
Updated 10 months ago
[Intel]: https://www.cisa.gov/news-events/alerts/2023/07/28/cisa-releases-malware-analysis-reports-barracuda-backdoors
Updated 10 months ago
[Intel]: https://www.lab539.com/blog/linux-malware-detection-with-limacharlie
Updated 10 months ago
[Intel]: https://blog.aquasec.com/teamtnt-reemerged-with-new-aggressive-cloud-campaign
Updated 10 months ago
[Intel]: https://daniele.bearblog.dev/cve-2023-35829-fake-poc-en/
Updated 10 months ago
[Intel]: https://github.com/timb-machine-mirrors/ChriSanders22-CVE-2023-35829-poc
Updated 10 months ago
[Intel]: https://www.wiz.io/blog/pyloose-first-python-based-fileless-attack-on-cloud-workloads
Updated 10 months ago
[Intel]: https://asec.ahnlab.com/en/55229/
Updated 10 months ago
[Intel]: https://blogs-jpcert-or-jp.translate.goog/ja/2023/07/dangerouspassword_dev.html?_x_tr_sl=auto&_x_tr_tl=en&_x_tr_hl=en-US&_x_tr_pto=wapp
Updated 10 months ago
[Intel]: https://blog.aquasec.com/threat-alert-anatomy-of-silentbobs-cloud-attack
Updated 10 months ago
[Intel]: https://www.fortinet.com/blog/threat-research/rocke-variant-ready-to-box-mining-challengers
Updated 10 months ago
[Intel]: https://sandflysecurity.com/blog/detecting-linux-binary-file-poisoning/
Updated 10 months ago
[Intel]: https://unit42.paloaltonetworks.com/mirai-variant-targets-iot-exploits/
Updated 10 months ago
[Intel]: https://blog.lumen.com/routers-from-the-underground-exposing-avrecon/
Updated 10 months ago
[Intel]: https://twitter.com/sethkinghi/status/1397814848549900288
Updated 10 months ago
[Intel]: https://github.com/cr0nx/awesome-linux-attack-forensics-purplelabs
Updated 10 months ago
[Intel]: https://sysdig.com/blog/cloud-defense-in-depth/
Updated 10 months ago