The newly discovered FontOnLake malware family delivers backdoor and rootkit components to infect Linux systems concealed in legitimate binaries.

The malware has a low prevalence in the wild and benefits from an advanced design that allows it to maintain extended persistence on an infected system.

FontOnLake has multiple modules that interact with one another and enable communication with malware operators, stealing sensitive data, and staying hidden on the system.