timb-machine/linux-malware

View on GitHub

Tracking interesting Linux (and UNIX) malware. Send PRs

Stars: 1.2k
Forks: 95
Open beginner issues: 0
Indexed issues: 798

Dominant language: HTML
License: Unlicense
Last GitHub push: Sep 8, 2026
Latest indexed: Sep 19, 2026
Contributing guide: No contributing guide
Code of conduct: No code of conduct
Beginner labels: good first issue help wanted
PR merge metrics: No merged PRs in 30d

Beginner friendly Everything

Open All

798 open issues indexed

[Intel]: https://www.elastic.co/security-labs/threat-command/memfd-create-linux-fileless-execution Open

confirmed new

timb-machine/linux-malware#843 · 1 assignee · Opened Sep 8, 2026
[Intel]: https://github.com/MatheuZSecurity/Dntry Open

confirmed new

timb-machine/linux-malware#842 · 1 assignee · Opened Sep 8, 2026
[Intel]: https://github.com/0x574R/Darkcloak Open

missing:submodule new triage

timb-machine/linux-malware#841 · 1 assignee · Opened Sep 8, 2026
[Intel]: https://www.rapid7.com/blog/post/tr-dprk-apts-ted-backdoor-curlrat-target-south-korean-media-automotive-sectors/ Open

new triage

timb-machine/linux-malware#840 · 1 assignee · Opened Sep 8, 2026
[Intel]: https://unit42.paloaltonetworks.com/lazagne-leverages-d-bus/ Open

new triage

timb-machine/linux-malware#839 · 1 assignee · Opened Aug 8, 2026
[Intel]: https://github.com/nodauf/Swego Open

missing:submodule new

timb-machine/linux-malware#838 · 1 assignee · Opened May 11, 2025
[Intel]: https://unit42.paloaltonetworks.com/new-linux-backdoor-auto-color/ Open

new

timb-machine/linux-malware#837 · 1 assignee · Opened Feb 28, 2025
[Intel]: https://blog-xlab-qianxin-com.translate.goog/analysis_of_new_melofee_variant_en/?_x_tr_sl=da&_x_tr_tl=en&_x_tr_hl=en-US&_x_tr_pto=wapp Open

new

timb-machine/linux-malware#836 · 1 assignee · Opened Feb 20, 2025
[Intel]: https://www.hvs-consulting.de/en/nfs-security-identifying-and-exploiting-misconfigurations/ Open

new

timb-machine/linux-malware#834 · 1 assignee · Opened Feb 19, 2025
[Intel]: https://github.com/DualHorizon/blackpill Open

missing:submodule new

timb-machine/linux-malware#833 · 1 assignee · Opened Feb 19, 2025
[Intel]: https://github.com/ricardojoserf/SSSD-creds Open

missing:submodule missing:tag:T1005 missing:tag:T1048 missing:tag:T1071.001 missing:tag:T1518 missing:tag:T1558 missing:tag:T1567 missing:tag:T1573 missing:tag:T1590 triage

timb-machine/linux-malware#831 · 1 assignee · Opened Feb 18, 2025
Update new_issue.yml to process just the issue that has changed Open

bug enhancement good first issue help wanted

Difficulty 2/5 1-3 hours Newbie friendliness 45/100

timb-machine/linux-malware#829 · 1 comment · Opened Feb 17, 2025
[Intel]: https://github.com/grahamhelton/USP Open

missing:tag:T1005 missing:tag:T1048 missing:tag:T1071.001 missing:tag:T1491 missing:tag:T1548.003 missing:tag:T1567 missing:tag:T1573

timb-machine/linux-malware#828 · 1 assignee · Opened Feb 17, 2025
[Intel]: https://github.com/containerscrew/rootisnaked Open

missing:tag:eBPF missing:tag:T1005 missing:tag:T1027.004 missing:tag:T1048 missing:tag:T1053.007 missing:tag:T1070.004 missing:tag:T1071.001 missing:tag:T1518 missing:tag:T1548.003 missing:tag:T1567 missing:tag:T1573 missing:tag:T1609 missing:tag:T1610

timb-machine/linux-malware#826 · 1 assignee · Opened Feb 17, 2025
[Intel]: https://github.com/altugbozkurt07/Unix-sniffer Open

missing:tag:T1005 missing:tag:T1048 missing:tag:T1071.001 missing:tag:T1548.003 missing:tag:T1567 missing:tag:T1573

timb-machine/linux-malware#825 · 1 assignee · Opened Feb 17, 2025
[Intel]: https://github.com/eurecom-s3/lemon Open

missing:tag:T1057 missing:tag:T1518 missing:tag:T1548.003

timb-machine/linux-malware#824 · 1 assignee · Opened Feb 17, 2025
[Intel]: https://www.welivesecurity.com/en/eset-research/unveiling-wolfsbane-gelsemiums-linux-counterpart-to-gelsevirine/ Open

new triage

timb-machine/linux-malware#822 · 1 assignee · Opened Feb 17, 2025
[Intel]: https://www.fortinet.com/blog/threat-research/deep-dive-into-a-linux-rootkit-malware Open

new triage

timb-machine/linux-malware#821 · 1 assignee · Opened Feb 17, 2025
[Intel]: https://www.elastic.co/security-labs/declawing-pumakit Open

new triage

timb-machine/linux-malware#820 · 1 assignee · Opened Dec 12, 2024
[Intel]: https://grahamhelton.com/blog/ssh_agent/ Open

confirmed triage

timb-machine/linux-malware#819 · 1 comment · 1 assignee · Opened Dec 6, 2024
[Intel]: https://medium.com/@damjanilic/linpeas-sh-used-for-a-cyber-awareness-campaign-22aa9a311aae Open

confirmed

timb-machine/linux-malware#818 · 1 assignee · Opened Dec 6, 2024
[Intel]: https://www.welivesecurity.com/en/eset-research/bootkitty-analyzing-first-uefi-bootkit-linux/ Open

confirmed

timb-machine/linux-malware#817 · 1 assignee · Opened Dec 6, 2024
[Intel]: https://arstechnica.com/security/2023/09/password-stealing-linux-malware-served-for-3-years-and-no-one-noticed/ Open

confirmed

timb-machine/linux-malware#816 · 1 assignee · Opened Dec 6, 2024
[Intel]: https://haxrob.net/fastcash-for-linux/ Open

confirmed

timb-machine/linux-malware#815 · 1 assignee · Opened Dec 6, 2024
[Intel]: https://www.uptycs.com/blog/threat-research-report-team/new-poc-exploit-backdoor-malware Open

confirmed

timb-machine/linux-malware#814 · 1 assignee · Opened Dec 6, 2024
[Intel]: https://github.com/SecurityFail/kompromat Open

missing:submodule

timb-machine/linux-malware#813 · 1 assignee · Opened Dec 6, 2024
[Intel]: https://github.com/grisuno/LazyOwn Open

missing:submodule missing:tag:Non-persistentStorage missing:tag:T1005 missing:tag:T1021.002 missing:tag:T1027.002 missing:tag:T1048 missing:tag:T1053.003 missing:tag:T1057 missing:tag:T1070.003 missing:tag:T1070.004 missing:tag:T1071.001 missing:tag:T1083 missing:tag:T1491 missing:tag:T1546.004 missing:tag:T1552.003 missing:tag:T1560 missing:tag:T1567 missing:tag:T1573 missing:tag:T1590 new

timb-machine/linux-malware#812 · 1 assignee · Opened Dec 6, 2024
[Intel]: https://github.com/stratosphereips/StratosphereLinuxIPS Open

missing:submodule new

timb-machine/linux-malware#811 · 1 assignee · Opened Dec 6, 2024
[Intel]: https://x.com/haxrob/status/1762821513680732222 Open

new

timb-machine/linux-malware#810 · 1 assignee · Opened Dec 6, 2024
[Intel]: https://www.binarydefense.com/resources/blog/shining-a-light-in-the-dark-how-binary-defense-uncovered-an-apt-lurking-in-shadows-of-it/ Open

confirmed

timb-machine/linux-malware#809 · 1 assignee · Opened Dec 6, 2024
[Intel]: https://www.ncsc.gov.uk/static-assets/documents/malware-analysis-reports/pygmy-goat/ncsc-mar-pygmy-goat.pdf Open

ignore:tag:T1021.004 ignore:tag:T1027.002 ignore:tag:T1053.003 ignore:tag:T1070.004 ignore:tag:T1083 ignore:tag:T1098.004 ignore:tag:T1491 ignore:tag:T1546.004 ignore:tag:T1552.004 ignore:tag:T1590 missing:tag:Non-persistentStorage missing:tag:T1005 missing:tag:T1574.006 missing:tag:wltm

timb-machine/linux-malware#808 · 1 assignee · Opened Dec 6, 2024
[Intel]: https://unfinished.bike/fun-with-the-new-bpfdoor-2023 Open

confirmed

timb-machine/linux-malware#803 · 1 assignee · Opened Feb 25, 2024
[Intel]: https://pastebin.com/kmmJuuQP Open

confirmed

timb-machine/linux-malware#802 · 1 assignee · Opened Feb 24, 2024
[Intel]: https://sysdig.com/blog/ssh-snake/ Open

confirmed

timb-machine/linux-malware#801 · 1 assignee · Opened Feb 24, 2024
[Intel]: https://joshua.hu/ssh-snake-ssh-network-traversal-discover-ssh-private-keys-network-graph Open

confirmed

timb-machine/linux-malware#800 · 1 assignee · Opened Feb 24, 2024
[Intel]: https://bitbucket.org/workspacespain/i-s00n-translated Open

confirmed

timb-machine/linux-malware#799 · 1 assignee · Opened Feb 24, 2024
[Intel]: https://www.group-ib.com/blog/krasue-rat/ Open

confirmed

timb-machine/linux-malware#797 · 1 assignee · Opened Feb 1, 2024
[Intel]: https://www.archcloudlabs.com/projects/debuginfod/ Open

confirmed

timb-machine/linux-malware#796 · 1 assignee · Opened Jan 31, 2024
[Intel]: https://github.com/tstromberg/malware-menagerie Open

new

timb-machine/linux-malware#795 · 1 assignee · Opened Jan 31, 2024
[Intel]: https://github.com/tstromberg/sunlight Open

good first issue missing:tag:eBPF missing:tag:Non-persistentStorage missing:tag:RedirectionToNull missing:tag:T1005 missing:tag:T1021.004 missing:tag:T1048 missing:tag:T1053.003 missing:tag:T1057 missing:tag:T1070.004 missing:tag:T1071.001 missing:tag:T1098.004 missing:tag:T1548.003 missing:tag:T1552.004 missing:tag:T1567 missing:tag:T1573 missing:tag:wltm new

timb-machine/linux-malware#794 · 1 assignee · Opened Jan 31, 2024
[Intel]: https://github.com/dsnezhkov/zombieant Open

confirmed ignore:tag:T1005 missing:tag:T1048 missing:tag:T1071.001 missing:tag:T1567 missing:tag:T1573 triage

timb-machine/linux-malware#793 · 1 assignee · Opened Jan 31, 2024
[Intel]: https://github.com/MegaManSec/SSH-Snake Open

missing:tag:IRC missing:tag:Non-persistentStorage missing:tag:T1005 missing:tag:T1021.002 missing:tag:T1021.004 missing:tag:T1048 missing:tag:T1057 missing:tag:T1070.003 missing:tag:T1070.004 missing:tag:T1071.001 missing:tag:T1083 missing:tag:T1098.004 missing:tag:T1548.003 missing:tag:T1552.003 missing:tag:T1552.004 missing:tag:T1567 missing:tag:T1573 missing:tag:T1590 new

timb-machine/linux-malware#791 · 1 assignee · Opened Jan 30, 2024
[Intel]: https://www.securityjoes.com/post/bibi-linux-a-new-wiper-dropped-by-pro-hamas-hacktivist-group Open

confirmed

timb-machine/linux-malware#790 · 1 assignee · Opened Jan 30, 2024
[Intel]: https://www.trendmicro.com/en_us/research/23/i/earth-lusca-employs-new-linux-backdoor.html Open

missing:tag:T1005 missing:tag:T1007 missing:tag:T1027.002 missing:tag:T1053.006 missing:tag:T1057 missing:tag:T1070.003 missing:tag:T1070.004 missing:tag:T1083 missing:tag:T1543.002 missing:tag:T1552.003 missing:tag:wltm

timb-machine/linux-malware#789 · 1 assignee · Opened Jan 30, 2024
[Intel]: https://blog.xlab.qianxin.com/mirai-tbot-en/ Open

confirmed

timb-machine/linux-malware#788 · 1 assignee · Opened Jan 30, 2024
[Intel]: https://blog.phylum.io/dozens-of-npm-packages-caught-attempting-to-deploy-reverse-shell/ Open

confirmed

timb-machine/linux-malware#787 · 1 assignee · Opened Jan 30, 2024
[Intel]: https://doublepulsar.com/cyber-toufan-goes-oprah-mode-with-free-linux-system-wipes-of-over-100-organisations-eaf249b042dc Open

confirmed

timb-machine/linux-malware#786 · 1 assignee · Opened Jan 30, 2024
[Intel]: https://www.kroll.com/en/insights/publications/cyber/inside-the-systembc-malware-server Open

confirmed

timb-machine/linux-malware#784 · 1 assignee · Opened Jan 30, 2024
[Intel]: https://github.com/SilentVoid13/Silent_Packer Open

missing:tag:T1005 missing:tag:T1048 missing:tag:T1071.001 missing:tag:T1083 missing:tag:T1567 missing:tag:T1573 new

timb-machine/linux-malware#783 · 1 assignee · Opened Jan 30, 2024
[Intel]: https://github.com/sad0p/d0zer Open

missing:tag:Go missing:tag:Non-persistentStorage missing:tag:T1021.002 missing:tag:T1027.004 missing:tag:T1048 missing:tag:T1070.004 missing:tag:T1071.001 missing:tag:T1546.004 missing:tag:T1567 missing:tag:T1573 missing:tag:T1574.006 missing:tag:T1574.007 missing:tag:T1590 new

timb-machine/linux-malware#782 · 1 assignee · Opened Jan 29, 2024

timb-machine/linux-malware

Get new issues in your inbox