China-Linked Hackers Backdoored Linux Login Software to Hide for Nearly a Decade
The Hacker News·
Originalartikel lesen bei The Hacker NewsInstead of hiding on the laptops and servers defenders watch most closely, a China-nexus group spent close to a decade hidden inside the Linux login system itself. Sygnia, which tracks the group as Velvet Ant, says it backdoored the PAM and OpenSSH components that decide who is allowed to sign in,...
MITRE ATT&CK Kill Chain (3 Techniken)
Reconnaissance
Resource Development