3 ms·
Direct link to the blog post with all details https://www.intezer.com/blog/research/new-linux-threat-symbiote/ https://www.intezer.com/blog/research/new-linux-t
by nixcraft 4y ago
Direct link to the blog post with all details https://www.intezer.com/blog/research/new-linux-threat-symbiote/ https://www.intezer.com/blog/research/new-linux-threat-symbi...
- b112 4y agoSymbiote Deep-Dive: Analysis of a New, Nearly-Impossible-to-Detect Linux Threat And disclosed in a blog post, with Nearly-Impossible-to-Read text.
- prvit 4y ago>Analysis of a New, Nearly-Impossible-to-Detect Linux Threat Yeah, that's a straight up lie. LD_PRELOAD kits are by definition very easy to detect.
- throw10920 4y ago...unless that LD_PRELOAD rootkit has had a large amount of elbow grease put into patching all of the usual detection methods. Which appears to be the case here.
- prvit 4y agoWhat exactly do you mean? The usual detection methods are essentially unpatchable while using this technique.