New stealthy Linux malware used to backdoor systems for years

guest · Apr 28, 2021

New stealthy Linux malware used to backdoor systems for years
April 28, 2021
https://www.bleepingcomputer.com/ne...x-malware-used-to-backdoor-systems-for-years/

A recently discovered Linux malware with backdoor capabilities has flown under the radar for years, allowing attackers to harvest and exfiltrate sensitive information from compromised devices.

The backdoor, dubbed RotaJakiro by researchers at Qihoo 360's Network Security Research Lab (360 Netlab), remains undetected by VirusTotal's anti-malware engines, although a sample was first uploaded in 2018.
RotaJakiro is designed to operate as stealthy as possible, encrypting its communication channels using ZLIB compression and AES, XOR, ROTATE encryption.
Click to expand...

Linux backdoor used to exfil stolen data
Attackers can use RotaJakiro to exfiltrate system info and sensitive data, manage plugins and files, and execute various plugins on compromised 64-bit Linux devices.

However, 360 Netlab is yet to discover the malware creators' true intent for their malicious tool due to lack of visibility when it comes to the plugins it deploys on infected systems.

"RotaJakiro supports a total of 12 functions, three of which are related to the execution of specific Plugins," the researchers added. "Unfortunately, we have no visibilityto the plugins, and therefore do not know its true purpose."
Click to expand...

zapjb · Apr 28, 2021

TY awaiting developments.

Log in or Sign up

New stealthy Linux malware used to backdoor systems for years

guest Guest

zapjb Registered Member

Log in or Sign up

New stealthy Linux malware used to backdoor systems for years

guest Guest

zapjb Registered Member

Useful Searches