Hackers Use Showboat Post-Exploitation Framework Against Middle East Telecom Firms
Black Lotus Labs has uncovered a highly elusive Linux-based post-exploitation framework dubbed Showboat. Active since mid-2022, this undocumented malware specifically targets telecommunications firms in...
Hackers Backdoor pam_unix.so and OpenSSH Binaries to Steal Credentials and Bypass Authentication
Threat actors linked to China have maintained a hidden presence inside a highly secure critical infrastructure network for nearly a decade.
Tracked by Sygnia...
Hackers Backdoor pam_unix.so and OpenSSH Binaries to Bypass Authentication and Steal Credentials
Imagine an attacker living inside a highly secure, isolated network for nearly a decade. Sygnia's incident response team recently uncovered exactly that during a...
Hackers Use OrBit Rootkit to Steal Linux SSH and Sudo Credentials
For four years, a stealthy Linux rootkit known as OrBit has quietly siphoned SSH and sudo credentials from compromised enterprise networks.
Initially thought to...
Researchers Warn Of PamDOORa Backdoor Attacking Linux Systems
A novel persistence technique targeting Linux environments, leverages the Linux Pluggable Authentication Module (PAM) architecture to grant threat actors persistent, privileged shell access.
Notably, this...