Quima Control: The Core Remote Administration Tool of the Quima Suite
Quima Control, also known as QuimaRAT, is a remote administration tool with 74 Windows and 46 macOS and Linux modules. It is…
Tag: Linux
China-Linked Velvet Ant Backdoored Linux PAM and OpenSSH for Nearly a Decade
Sygnia, tracking the China-nexus group as Velvet Ant, discovered that the group backdoored Linux PAM and OpenSSH components to maintain persistent access…
PAM (Pluggable Authentication Modules): Linux Authentication Framework
PAM is a Linux authentication framework that was backdoored by Velvet Ant to allow secret password access and credential theft. The group…
Operation Highland: Velvet Ant’s Long-Term Linux Login Backdoor Campaign
Operation Highland is a campaign by the China-linked Velvet Ant group that backdoored Linux PAM and OpenSSH components to maintain persistent access…
Arch Linux: Linux Distribution
Arch Linux is a Linux distribution known for its rolling release model. Its community repository, AUR, was targeted in the Atomic Arch…
MYRA: Linux Remote Access Trojan
MYRA is a full-featured Linux RAT delivered via a malicious npm package 'apintergrationpost', claiming to be a Node.js integration client for red…
CVE-2022-0492 — Linux Kernel Improper Authentication Vulnerability
Linux Kernel Improper Authentication Vulnerability Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of…