[Intel]: https://www.fortiguard.com/threat-signal-report/4735/new-shikitega-malware-targets-linux-machines

Area

Malware reports

Parent threat

Defense Evasion, Discovery, Execution, Persistence, Privilege Escalation

Finding

https://www.fortiguard.com/threat-signal-report/4735/new-shikitega-malware-targets-linux-machines

Industry reference

attack:T1036.005:Match Legitimate Name or Location
attack:T1059:Command and Scripting Interpreter
attack:T1569:System Service
attack:T1569.002:Service Execution
attack:T1543:Create or Modify System Process
attack:T1027:Obfuscated Files or Information
uses:Non-persistentStorage
attack:T1057:Process Discovery
attack:T1070.004:File Deletion
attack:T1546.004:Unix Shell
exploit:CVE-2021-3493
exploit:CVE-2021-4034
https://github.com/timb-machine/linux-malware/issues/510

Malware reference

Shikitega
/malware/binaries/Shikitega
XMRig

Actor reference

No response

Component

Linux

Scenario

No response