Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Hackers have developed a Linux port of the Cobalt Strike penetration testing toolkit dubbed Vermilion Strike to evade malware detection. . Cyber criminals have developed a Linux port of the Cobalt Strike penetration testing tool that has been dubbed Vermilion Strike, security researchers have discovered. The tool has been developed from scratch to avoid detection from malware scanners. According to a report published by cloud security firm Intezer Labs, researchers last month discovered a fully undetected ELF implementation of Cobalt Strike’s beacon . The malware used Cobalt Strike’s Command and Control (C2) protocol when communicating to its C2 server and has remote access capabilities such as uploading files, running shell commands, and writing to files. . Hackers have developed a Linux variant of Cobalt Strike, upgrading their malware avoidance strategies with additional features.. Linux Port Cobalt Strike, Vermilion Strike, Malware Evasion, Penetration Testing Toolkit, Cyber Crime. . LinuxSecurity.com Team
The art of burying invisible malware deep inside a Linux machine is about to go mainstream, thanks to a new open-source rootkit released Thursday by Immunity Inc., a firm that supplies tools for penetration testers. When implemented, Immunity's DR, or Debug Register, makes backdoors and other types of malware extremely difficult to detect or eradicate. It's notable because it cloaks itself by burrowing deep inside a server's processor and availing itself of debugging mechanisms available in Intel's chip architecture. The rootkit, in other words, mimics a kernel debugger. Rootkits are a treat that every computer user should think about. This article discusses one type of Linux rootkit which tries to mimics a kernel debugger.. The link for this article located at TheRegister is no longer available. . A recently released open-source rootkit from Immunity Inc. boosts the stealth capabilities of malware, complicating efforts to uncover its presence.. Open Source Rootkit, Malware Detection Challenge, Linux Security Tools. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.