Microsoft Finds Hackers Using GSocket to Hide Linux Backdoors as Legitimate System Processes

Attackers deployed GSocket on compromised Linux servers, disguised its processes as legitimate system components, and retained access after administrators patched the original vulnerabilities. In its November 11 report, Microsoft described unrelated threat actors abusing the open source remote access tool rather than maintaining dedicated command-and-control infrastructure. Defender for Endpoint telemetry recorded a 356.2% increase in […]

Read the original article:

Microsoft Finds Hackers Using GSocket to Hide Linux Backdoors as Legitimate System Processes