Linux Backdoor Archives • Daily CyberSecurity

Kimsuky Hacked South Korean Groupware Vendors With New Gomir Variants Kimsuky Gomir variant attack chain showing the DriveTroy backdoor using Google Drive as a covert C2 channel

Kimsuky Gomir variant attack chain showing the DriveTroy backdoor using Google Drive as a covert C2 channel

Kimsuky Hacked South Korean Groupware Vendors With New Gomir Variants

Do Son July 27, 2026

At a glance Actor or group Kimsuky, a North Korea-linked group also tracked as Springtail, Thallium and...

Harvester APT Goes Cross-Platform: New Linux Backdoor Abuses Microsoft Graph API Harvester APT Linux Backdoor OT Cyberattack Iranian APT Operation Olalampo MuddyWater APT Prince of Persia APT, Tonnerre v50 Patchwork APT, DLL Sideloading Subtle Snail, cyber espionage ShadowSilk, cyber espionage Volt Typhoon APT Group - Chinese Cybersecurity Firm

Harvester APT Linux Backdoor OT Cyberattack Iranian APT Operation Olalampo MuddyWater APT Prince of Persia APT, Tonnerre v50 Patchwork APT, DLL Sideloading Subtle Snail, cyber espionage ShadowSilk, cyber espionage Volt Typhoon APT Group - Chinese Cybersecurity Firm

Harvester APT Goes Cross-Platform: New Linux Backdoor Abuses Microsoft Graph API

Do Son April 24, 2026

The sophisticated threat actor known as Harvester is expanding its horizons. Traditionally known for targeting Windows environments,...

Red Menshen’s Sleeper Cells Hijack the Global Telecom “Nervous System” Red Menshen BPFdoor Stealth

Red Menshen’s Sleeper Cells Hijack the Global Telecom “Nervous System”

Do Son April 2, 2026

A months-long investigation by Rapid7 Labs has detailed the curtain on a quiet invasion. An advanced China-nexus...

AI Uncovers GhostPenguin: Undetectable Linux Backdoor Used RC5-Encrypted UDP for Covert C2 WhatsApp Worm, Brazilian Banking Trojan LAPSUS$ Alliance, Scattered Spider Ransomware, Cybercrime RedCurl APT group Russian Cyberespionage, ApolloShadow Malware

WhatsApp Worm, Brazilian Banking Trojan LAPSUS$ Alliance, Scattered Spider Ransomware, Cybercrime RedCurl APT group Russian Cyberespionage, ApolloShadow Malware

AI Uncovers GhostPenguin: Undetectable Linux Backdoor Used RC5-Encrypted UDP for Covert C2

Do Son December 9, 2025

In a demonstration of AI-powered defense, security researchers at Trend Micro have uncovered a previously unknown and...

Auto-Color: New Evasive Linux Malware Targeting Governments and Universities XZ backdoor, Docker Hub MIFARE classic backdoor C++/CLI IIS Backdoor

XZ backdoor, Docker Hub MIFARE classic backdoor C++/CLI IIS Backdoor

Auto-Color: New Evasive Linux Malware Targeting Governments and Universities

Do Son February 26, 2025

Researchers at Palo Alto Networks’ Unit 42 have uncovered a new and highly evasive Linux backdoor called...

North Korean Espionage Group Springtail Unveils New Linux Backdoor in Escalating Cyber Campaign Springtail (also known as Kimsuky) has added a new Linux backdoor, dubbed Gomir

Springtail (also known as Kimsuky) has added a new Linux backdoor, dubbed Gomir

North Korean Espionage Group Springtail Unveils New Linux Backdoor in Escalating Cyber Campaign

Do Son May 19, 2024

Symantec’s Threat Hunter Team has revealed a concerning development in the cyber espionage landscape: the North Korean...