-
Notifications
You must be signed in to change notification settings - Fork 91
Issues: timb-machine/linux-malware
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Author
Label
Projects
Milestones
Assignee
Sort
Issues list
[Intel]: https://www.welivesecurity.com/2013/05/07/linuxcdorked-malware-lighttpd-and-nginx-web-servers-also-affected/
missing:tag:JavaScript
missing:tag:T1001
missing:tag:T1027.002
missing:tag:T1048
missing:tag:T1057
missing:tag:T1070.004
missing:tag:T1071.001
missing:tag:T1491
missing:tag:T1546.004
missing:tag:T1558
missing:tag:T1567
missing:tag:T1573
missing:tag:T1590
new
#513
opened Sep 7, 2022 by
timb-machine
[Intel]: https://cybersecurity.att.com/blogs/labs-research/shikitega-new-stealthy-malware-targeting-linux
missing:tag:T1005
missing:tag:T1048
missing:tag:T1053.003
missing:tag:T1070.004
missing:tag:T1071.001
missing:tag:T1083
missing:tag:T1491
missing:tag:T1546.004
missing:tag:T1567
missing:tag:T1573
#510
opened Sep 6, 2022 by
timb-machine
[Intel]: https://hybrid-analysis.com/sample/eb8826bac873442045a6a05f1fa25b410ca18db6942053f6d146467c00d5338d
missing:tactics
missing:tag:T1048
missing:tag:T1057
missing:tag:T1070.004
missing:tag:T1071.001
missing:tag:T1491
missing:tag:T1546.004
missing:tag:T1567
missing:tag:T1573
new
#508
opened Sep 3, 2022 by
timb-machine
[Intel]: https://blog.polyswarm.io/lightning-framework
missing:tactics
missing:tag:T1003.008
missing:tag:T1005
missing:tag:T1007
missing:tag:T1037
missing:tag:T1048
missing:tag:T1053.006
missing:tag:T1070.004
missing:tag:T1071.001
missing:tag:T1098.004
missing:tag:T1491
missing:tag:T1543.002
missing:tag:T1546.004
missing:tag:T1552.004
missing:tag:T1567
missing:tag:T1573
missing:tag:T1574.006
missing:tag:T1590
new
#506
opened Sep 2, 2022 by
timb-machine
[Intel]: https://www.uptycs.com/blog/another-ransomware-for-linux-likely-in-development
missing:tag:ProcessTreeSpoofingThreads
missing:tag:T1027.002
missing:tag:T1048
missing:tag:T1057
missing:tag:T1070.004
missing:tag:T1071.001
missing:tag:T1491
missing:tag:T1546.004
missing:tag:T1560
missing:tag:T1567
missing:tag:T1573
new
#505
opened Sep 2, 2022 by
timb-machine
[Intel]: https://blog.avast.com/2013/08/27/linux-trojan-hand-of-thief-ungloved/
missing:tactics
missing:tag:Non-persistentStorage
missing:tag:T1005
missing:tag:T1021.002
missing:tag:T1040
missing:tag:T1048
missing:tag:T1057
missing:tag:T1070.003
missing:tag:T1070.004
missing:tag:T1071.001
missing:tag:T1491
missing:tag:T1546.004
missing:tag:T1552.003
missing:tag:T1567
missing:tag:T1573
missing:tag:T1590
new
#503
opened Aug 21, 2022 by
timb-machine
[Intel]: https://www.trendmicro.com/en_us/research/22/h/irontiger-compromises-chat-app-Mimi-targets-windows-mac-linux-users.html
deprecated:template
missing:tag:JavaScript
missing:tag:Non-persistentStorage
missing:tag:T1005
missing:tag:T1048
missing:tag:T1057
missing:tag:T1070.003
missing:tag:T1070.004
missing:tag:T1071.001
missing:tag:T1083
missing:tag:T1491
missing:tag:T1518
missing:tag:T1546.004
missing:tag:T1552.003
missing:tag:T1567
missing:tag:T1573
new
#501
opened Aug 17, 2022 by
timb-machine
[Intel]: https://blog.reversinglabs.com/blog/gwisinlocker-ransomware-targets-south-korean-industrial-and-pharmaceutical-companies
missing:tag:Non-persistentStorage
missing:tag:NPM
missing:tag:RedirectionToNull
missing:tag:T1021.002
missing:tag:T1027.002
missing:tag:T1048
missing:tag:T1053.007
missing:tag:T1057
missing:tag:T1070.002
missing:tag:T1070.003
missing:tag:T1070.004
missing:tag:T1071.001
missing:tag:T1491
missing:tag:T1546.004
missing:tag:T1552.003
missing:tag:T1567
missing:tag:T1573
missing:tag:T1609
missing:tag:T1610
new
#496
opened Aug 12, 2022 by
timb-machine
[Intel]: https://blog.sonatype.com/pypi-package-secretslib-drops-fileless-linux-malware-to-mine-monero
missing:tag:Non-persistentStorage
missing:tag:RedirectionToNull
missing:tag:T1005
missing:tag:T1021.002
missing:tag:T1048
missing:tag:T1057
missing:tag:T1070.004
missing:tag:T1071.001
missing:tag:T1083
missing:tag:T1222
missing:tag:T1491
missing:tag:T1518
missing:tag:T1546.004
missing:tag:T1548.001
missing:tag:T1548.003
missing:tag:T1567
missing:tag:T1573
missing:tag:T1590
missing:tag:T1620
new
#495
opened Aug 12, 2022 by
timb-machine
[Intel]: https://redcanary.com/blog/process-streams/
deprecated:template
missing:tag:eBPF
missing:tag:RedirectionToNull
missing:tag:T1003.008
missing:tag:T1005
missing:tag:T1021.002
missing:tag:T1037
missing:tag:T1046
missing:tag:T1048
missing:tag:T1053.003
missing:tag:T1053.007
missing:tag:T1057
missing:tag:T1059.006
missing:tag:T1070.002
missing:tag:T1070.004
missing:tag:T1071.001
missing:tag:T1083
missing:tag:T1205
missing:tag:T1491
missing:tag:T1546.004
missing:tag:T1567
missing:tag:T1573
missing:tag:T1590
missing:tag:T1609
missing:tag:T1610
#494
opened Aug 8, 2022 by
timb-machine
[Intel]: https://www.bitdefender.com/files/News/CaseStudies/study/376/Bitdefender-Whitepaper-IPStorm.pdf
missing:tag:IRC
missing:tag:Non-persistentStorage
missing:tag:T1021.002
missing:tag:T1021.004
missing:tag:T1027.002
missing:tag:T1048
missing:tag:T1057
missing:tag:T1070.004
missing:tag:T1071.001
missing:tag:T1083
missing:tag:T1491
missing:tag:T1518
missing:tag:T1567
missing:tag:T1573
missing:tag:T1590
missing:tag:wltm
#493
opened Aug 8, 2022 by
timb-machine
[Intel]: https://blog.talosintelligence.com/2022/08/manjusaka-offensive-framework.html
missing:tactics
missing:tag:T1001
missing:tag:T1003.008
missing:tag:T1005
missing:tag:T1021.002
missing:tag:T1027.002
missing:tag:T1048
missing:tag:T1057
missing:tag:T1070.004
missing:tag:T1071.001
missing:tag:T1078.003
missing:tag:T1083
missing:tag:T1491
missing:tag:T1546.004
missing:tag:T1567
missing:tag:T1573
missing:tag:wltm
#490
opened Aug 8, 2022 by
timb-machine
[Intel]: https://www.fortinet.com/blog/threat-research/rapperbot-malware-discovery
missing:tag:RedirectionToNull
missing:tag:T1003.008
missing:tag:T1005
missing:tag:T1021.002
missing:tag:T1021.004
missing:tag:T1048
missing:tag:T1053.003
missing:tag:T1057
missing:tag:T1070.004
missing:tag:T1071.001
missing:tag:T1078.003
missing:tag:T1083
missing:tag:T1098.004
missing:tag:T1222
missing:tag:T1491
missing:tag:T1546.004
missing:tag:T1548.001
missing:tag:T1552.004
missing:tag:T1567
missing:tag:T1573
new
#488
opened Aug 5, 2022 by
timb-machine
[Intel]: https://github.com/io-tl/Mara
missing:tactics
missing:tag:Non-persistentStorage
missing:tag:T1005
missing:tag:T1021.002
missing:tag:T1021.004
missing:tag:T1027.004
missing:tag:T1048
missing:tag:T1057
missing:tag:T1070.004
missing:tag:T1071.001
missing:tag:T1546.004
missing:tag:T1548.003
missing:tag:T1567
missing:tag:T1573
new
#487
opened Aug 2, 2022 by
timb-machine
[Intel]: https://www.intezer.com/blog/malware-analysis/linux-rekoobe-operating-with-new-undetected-malware-samples/
missing:tactics
missing:tag:ProcessTreeSpoofing
missing:tag:T1005
missing:tag:T1021.002
missing:tag:T1027.002
missing:tag:T1048
missing:tag:T1053.003
missing:tag:T1057
missing:tag:T1070.004
missing:tag:T1071.001
missing:tag:T1083
missing:tag:T1205
missing:tag:T1491
missing:tag:T1546.004
missing:tag:T1567
missing:tag:T1573
new
#479
opened Jul 23, 2022 by
timb-machine
[Intel]: https://blog.sekoia.io/walking-on-apt31-infrastructure-footprints/
missing:tactics
missing:tag:T1005
missing:tag:T1021.002
missing:tag:T1027.002
missing:tag:T1048
missing:tag:T1070.004
missing:tag:T1071.001
missing:tag:T1083
missing:tag:T1222
missing:tag:T1491
missing:tag:T1546.004
missing:tag:T1548.001
missing:tag:T1560
missing:tag:T1567
missing:tag:T1573
missing:tag:T1590
new
#478
opened Jul 23, 2022 by
timb-machine
[Intel]: https://buzzchronicles.com/Mollyycolllinss/b/internet/7795/
missing:tactics
missing:tag:JavaScript
missing:tag:ProcessTreeSpoofing
missing:tag:ProcessTreeSpoofingForking
missing:tag:PyPI
missing:tag:T1027.002
missing:tag:T1048
missing:tag:T1055.008
missing:tag:T1057
missing:tag:T1070.003
missing:tag:T1070.004
missing:tag:T1070.006
missing:tag:T1071.001
missing:tag:T1083
missing:tag:T1491
missing:tag:T1546.004
missing:tag:T1552.003
missing:tag:T1560
missing:tag:T1567
missing:tag:T1573
missing:tag:T1590
missing:tag:T1622
new
#475
opened Jul 23, 2022 by
timb-machine
[Intel]: https://xorl.wordpress.com/2022/06/22/the-forgotten-suaveeyeful-freebsd-software-implant-of-the-equation-group/
missing:tactics
missing:tag:Non-persistentStorage
missing:tag:RedirectionToNull
missing:tag:T1001
missing:tag:T1005
missing:tag:T1021.002
missing:tag:T1027.002
missing:tag:T1048
missing:tag:T1057
missing:tag:T1070.003
missing:tag:T1070.004
missing:tag:T1070.006
missing:tag:T1071.001
missing:tag:T1083
missing:tag:T1222
missing:tag:T1491
missing:tag:T1546.004
missing:tag:T1548.001
missing:tag:T1552.003
missing:tag:T1560
missing:tag:T1567
missing:tag:T1573
missing:tag:T1574.007
new
#474
opened Jul 23, 2022 by
timb-machine
[Intel]: https://grugq.github.io/docs/subversiveld.pdf
missing:tactics
missing:tag:IRC
missing:tag:T1021.002
missing:tag:T1048
missing:tag:T1055.008
missing:tag:T1057
missing:tag:T1070.004
missing:tag:T1071.001
missing:tag:T1491
missing:tag:T1567
missing:tag:T1573
missing:tag:T1622
new
#473
opened Jul 23, 2022 by
timb-machine
[Intel]: https://blog.blockmagnates.com/hunt-linux-malware-with-cgroups-497733095a94
missing:tactics
missing:tag:ProcessTreeSpoofing
missing:tag:ProcessTreeSpoofingForking
missing:tag:T1007
missing:tag:T1021.002
missing:tag:T1021.004
missing:tag:T1027.002
missing:tag:T1037
missing:tag:T1048
missing:tag:T1053.003
missing:tag:T1053.006
missing:tag:T1057
missing:tag:T1070.003
missing:tag:T1070.004
missing:tag:T1071.001
missing:tag:T1491
missing:tag:T1543.002
missing:tag:T1546.004
missing:tag:T1552.003
missing:tag:T1560
missing:tag:T1567
missing:tag:T1573
missing:tag:T1574.006
missing:tag:T1574.007
missing:tag:T1590
new
#472
opened Jul 23, 2022 by
timb-machine
[Intel]: https://www.intezer.com/blog/malware-analysis/hiddenwasp-malware-targeting-linux-systems/
missing:tactics
missing:tag:T1005
missing:tag:T1021.002
missing:tag:T1027.002
missing:tag:T1048
missing:tag:T1053.003
missing:tag:T1057
missing:tag:T1070.004
missing:tag:T1071.001
missing:tag:T1071.002
missing:tag:T1083
missing:tag:T1491
missing:tag:T1560
missing:tag:T1567
missing:tag:T1573
missing:tag:T1574.006
new
#471
opened Jul 23, 2022 by
timb-machine
[Intel]: https://www.intezer.com/blog/research/lightning-framework-new-linux-threat/
missing:tactics
missing:tag:T1005
missing:tag:T1007
missing:tag:T1021.002
missing:tag:T1037
missing:tag:T1037.004
missing:tag:T1048
missing:tag:T1053.003
missing:tag:T1053.006
missing:tag:T1057
missing:tag:T1070.004
missing:tag:T1071.001
missing:tag:T1098.004
missing:tag:T1491
missing:tag:T1543.002
missing:tag:T1546.004
missing:tag:T1552.004
missing:tag:T1567
missing:tag:T1573
missing:tag:T1574.006
missing:tag:T1590
new
#470
opened Jul 23, 2022 by
timb-machine
ProTip!
Mix and match filters to narrow down what you’re looking for.