A new Linux malware sample that strongly aligns with the SysUpdate malware family used by APT27/Iron Tiger. Initially detected on a client’s system, the binary behaved like a system service and executed the GNU/Linux id command when run without specific arguments, returning the output as part of its basic functionality. Closer inspection showed that the sample was […]

The post New SysUpdate Variant Malware Discovered, Decryption Tool for Linux C2 Traffic Released appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.