/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 blogs.blackberry.com
Symbiote: A New, Nearly-Impossible-to-Detect Linux Threat
| | blog.talosintelligence.com
Threat Spotlight: WarmCookie/BadSpace
4.4 parsecs away

Travel
| | WarmCookie is a malware family that emerged in April 2024 and has been distributed via regularly conducted malspam and malvertising campaigns.
| | thehackernews.com
LinkPro Linux Rootkit Uses eBPF to Hide and Activates via Magic TCP Packets
3.1 parsecs away

Travel
| | Synacktiv uncovered LinkPro, a Golang rootkit using eBPF hide/knock modules activated by TCP window 54321.
| | www.welivesecurity.com
An In-depth Analysis of Linux/Ebury
1.9 parsecs away

Travel
| | In this blog post, we provide an in-depth analysis of Linux/Ebury - the most sophisticated Linux backdoor ever seen by our researchers. It is built to steal OpenSSH credentials and maintain access to a compromised server.
| | docfate111.github.io
CVE-2021-42327 GPU kernel driver SLUB overflow | The blog
30.0 parsecs away

Travel
| [AI summary] A detailed explanation of a Linux kernel vulnerability (CVE-2021-42327) in the GPU driver, involving a SLUB buffer overflow that allows privilege escalation and arbitrary code execution through exploitation techniques like heap spraying and KASLR bypass.