Stefan Mileschin

Never seen before adaption of a Windows backdoor

Researchers have discovered a never-before-seen backdoor for Linux used by a threat actor linked to the Chinese government.

The new backdoor originates from a Windows backdoor named Trochilus, first seen in 2015 by researchers from Arbor Networks, now known as Netscout. They said that Trochilus executed and ran only in memory, and the final payload never appeared on disks in most cases. That made the malware difficult to detect.

https://fudzilla.com/news/57623-linu...ese-government