Tag: Rootkit
Chinese crew turns a Gitea bug into a 13-victim espionage spree
A newly named threat actor automated a July Gitea flaw into a framework that stole source code and pushed on…
PoisonedRefresh rootkit keeps F5 web shells invisible to disk scans
A fileless rootkit dubbed PoisonedRefresh injects PHP web shells into the memory of compromised F5 BIG-IP APM appliances.
SPECTRE backdoor shows how AI sharpens mass web server raids
Cisco Talos details UAT-10147, a Chinese-speaking crew that leans on AI tooling and a new SPECTRE implant to hit web…
Massive AUR Package Hijack Campaign Spreads Cryptominer and eBPF Rootkit
Attackers hijacked over 400 abandoned Arch Linux AUR packages by modifying build scripts to deploy a Rust credential stealer and…
Persistent Backdoor Compromises Cisco Firepower Appliances at a Federal Agency
FIRESTARTER backdoor embeds itself in the firmware of Cisco Firepower appliances, allowing it to survive OS reinstalls and standard security…