#rootkit

2 tutorials tagged with "rootkit"

F5 BIG-IP APM Grew a Fileless Rootkit. Hashes Will Not Save You

Sophos and ESET describe PoisonedRefresh: a Linux implant that serves a PHP web shell from memory on BIG-IP APM webtop files. Disk looks clean. Check mmap, a pipe, and HTTP 201 pretending to be CSS.

security

Arch Linux AUR Hit by Massive Supply Chain Attack — Over 400 Packages Compromised

A coordinated supply chain attack has compromised hundreds of Arch User Repository packages, injecting infostealers and rootkit-like malware. Here's what server administrators need to know and how to protect your systems.

security