China-Linked UAT-7810 Expands ORB Network With New LONGLEASH Malware
A Chinese threat actor tracked as UAT-7810 is actively refining its bespoke malware to expand its Operational Relay Box (ORB) network by…
Tag: Linux
DOGLEASH: Passive Backdoor for Linux Devices
DOGLEASH is a passive backdoor that can execute arbitrary shellcode on a compromised Linux device. It was deployed by UAT-7810 against compromised…
16-Year-Old Linux KVM Flaw Januscape (CVE-2026-53359) Enables Guest-to-Host Escape on Intel and AMD
A critical use-after-free vulnerability in the Linux Kernel-based Virtual Machine (KVM) hypervisor, tracked as CVE-2026-53359 and named 'Januscape', allows a guest virtual…
New Java-Based QuimaRAT MaaS Built to Run on Windows, Linux, and macOS
Cybersecurity researchers at LevelBlue have identified a new Java-based remote access trojan (RAT) named QuimaRAT, which is capable of targeting Windows, Linux,…
QuimaRAT: A New Java-Based Cross-Platform Remote Access Trojan
QuimaRAT is a Java-based remote access trojan (RAT) advertised under a malware-as-a-service (MaaS) model, capable of targeting Windows, Linux, and macOS. It…
Quima Control: The Core Remote Administration Tool of the Quima Suite
Quima Control, also known as QuimaRAT, is a remote administration tool with 74 Windows and 46 macOS and Linux modules. It is…
China-Linked Velvet Ant Backdoored Linux PAM and OpenSSH for Nearly a Decade
Sygnia, tracking the China-nexus group as Velvet Ant, discovered that the group backdoored Linux PAM and OpenSSH components to maintain persistent access…
PAM (Pluggable Authentication Modules): Linux Authentication Framework
PAM is a Linux authentication framework that was backdoored by Velvet Ant to allow secret password access and credential theft. The group…
Operation Highland: Velvet Ant’s Long-Term Linux Login Backdoor Campaign
Operation Highland is a campaign by the China-linked Velvet Ant group that backdoored Linux PAM and OpenSSH components to maintain persistent access…
Arch Linux: Linux Distribution
Arch Linux is a Linux distribution known for its rolling release model. Its community repository, AUR, was targeted in the Atomic Arch…