LinkPro Linux Rootkit Uses eBPF to Hide and Activates via Magic TCP Packets

thehackernews.com

cross-posted to:
pulse_of_truth@infosec.pub

LinkPro Linux Rootkit Uses eBPF to Hide and Activates via Magic TCP Packets

thehackernews.com

cm0002@lemmy.zip to

Linux@programming.dev · 2 months ago

cross-posted to:
pulse_of_truth@infosec.pub

Synacktiv uncovered LinkPro, a Golang rootkit using eBPF hide/knock modules activated by TCP window 54321.

You must log in or # to comment.

Chat

Linux@programming.dev

linux@programming.dev

Create a post

You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !linux@programming.dev

A community for everything relating to the GNU/Linux operating system (except the memes!)

Also, check out:

Original icon base courtesy of lewing@isc.tamu.edu and The GIMP

Visibility: Public

This community can be federated to other instances and be posted/commented in by their users.

11 users / day
11 users / week
11 users / month
11 users / 6 months
0 local subscribers
9.79K subscribers
136 Posts
0 Comments
Modlog