Chinese state hackers target Linux systems with new backdoor RedXOR
According to Intezer security researchers, a previously undocumented backdoor malware RedXOR with links to Chinese hacking groups is used in current campaign targeting Linux systems.
RedXOR samples were first found in Indonesia and Taiwan and have a very low detection rate.
RedXOR includes a large variety of features, like executing commands with system privileges, managing files on infected Linux boxes, hiding its process using the Adore-ng open-source rootkit, proxying malicious traffic, remote updating, and more.
Read more...