[Intel]: https://arstechnica.com/security/2023/09/password-stealing-linux-malware-served-for-3-years-and-no-one-noticed/

[timb-machine]

Area

Supply chain attacks

Parent threat

Initial Access, Persistence, Credential Access, Command and Control

Finding

https://arstechnica.com/security/2023/09/password-stealing-linux-malware-served-for-3-years-and-no-one-noticed/

Industry reference

Free Download Manager
#765
#766
attack:T1053.003:Cron
attack:T1555.005:Password Managers
uses:Non-persistentStorage

Malware reference

wltm

Actor reference

No response

Component

Linux

Scenario

No response