New VoidLink Linux Malware Framework Discovered with Advanced Attack Capabilities
By
Brajeshwar
A second-rack bagel that's nearly first-rack. Tasty stuff.
Summary
Researchers have discovered a new Linux malware framework called VoidLink that features over 30 customizable modules providing advanced capabilities for attackers. The framework enables reconnaissance, privilege escalation, lateral movement, and stealth operations on infected Linux machines, with capabilities described as far more advanced than typical malware.
Key quotes
· 4 pulledResearchers have discovered a never-before-seen framework that infects Linux machines with a wide assortment of modules that are notable for the range of advanced capabilities they provide to attackers.
The framework, referred to as VoidLink by its source code, features more than 30 modules that can be used to customize capabilities to meet attackers' needs for each infected machine.
These modules can provide additional stealth and specific tools for reconnaissance, privilege escalation, and lateral movement inside a compromised network.
VoidLink includes an unusually broad and advanced array of capabilities.
You might also wanna read
New 'The Gentlemen' Ransomware Uses SYSTEM Scheduled Tasks to Encrypt Drives with Elevated Privileges
A newly analyzed ransomware strain called The Gentlemen, built in Go and obfuscated with Garble, is raising alarms in cybersecurity. It comb
cybersecuritynews.com·2d ago
North Korean Hackers Exploit Visual Studio Code to Deploy Backdoor Malware via Git Repositories
Jamf Threat Labs has identified North Korean threat actors expanding their abuse of Microsoft Visual Studio Code to deploy backdoor malware.
jamf.com·4mo ago
Microsoft warns of crypto mining malware disguised as fake downloads of popular PC utilities
Microsoft's Windows Defender team has uncovered a cryptocurrency mining campaign targeting PC enthusiasts. Scammers are manipulating search
techspot.com·6h ago
Google reports first evidence of hackers using AI to develop zero-day security exploit
Google has reported evidence of hackers using AI to develop a zero-day security vulnerability, marking the first time the company has observ
politico.com·7h ago
FBI warns healthcare sector about Silent Ransom Group impersonating IT support staff
The FBI has issued an alert about the Silent Ransom Group (also known as Luna Moth, Chatty Spider, and UNC3753), a cyber threat group active
aha.org·8h ago
Microsoft faces cybersecurity community backlash over Digital Crimes Unit threats against exploit disclosures
Microsoft is facing backlash from the cybersecurity community after threatening to use its 'Digital Crimes Unit' against security researcher
windowscentral.com·13h ago