timb-machine / timb-machine/linux-malware
[Intel]: https://twitter.com/inversecos/status/1527188391347068928
Open
@timb-machine is already working on this.
Since May 19, 2022.
deprecated:template
missing:tag:Non-persistentStorage
missing:tag:T1027.002
missing:tag:T1048
missing:tag:T1057
missing:tag:T1071.001
missing:tag:T1560
missing:tag:T1567
missing:tag:T1573
missing:tag:T1590
missing:tag:T1620
- Dominant language
- HTML
- Stars
- 1.2k
- Forks
- 95
- PR merge metrics
- No merged PRs in 30d
Description
Area
Defensive tools
Parent threat
Persistence, Defense Evasion
Finding
https://twitter.com/inversecos/status/1527188391347068928
Industry reference
attack:T1205.002:Socket Filters
attack:T1036:Masquerading
attack:T1070:Indicator Removal on Host
Malware reference
BPFDoor
Tricephalic Hellkeeper
Unix.Backdoor.RedMenshen
JustForFun
Actor reference
DecisiveArchitect
Component
Linux, Solaris
Scenario
No response
Scenario variation
Device application sandboxing
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.