· haxrob · Linux malware
Hiding in plain sight - Mount namespaces
An exceptionally stealthy technique to hide files and masquerade processes on Linux systems
haxrob
Security research: malware analysis, reverse engineering, and hardware/IoT teardown.
· haxrob · Linux malwareBPFDoor - Part 2 - The Present
· haxrob · BPFDoorBPFDoor - Part 1 - The Past
An exploration into the archeological roots of the BPFDoor Linux malware.
· haxrob · LinuxFASTCash for Linux
Analysis of a newly discovered Linux based variant of the DPRK attributed FASTCash malware along with background information on payment switches used in financial networks.
· haxrob · LinuxHiding in plain sight - Abusing the dynamic linker
A stealthy process stomping method compatible with UNIX-like systems with anti-forensic enhancements for Linux.
· haxrob · LinuxHiding in plain sight: Modifying process names in UNIX-like systems
Exploring ways malware on Linux and other UNIX-like systems can disguise their process names.