APT41 Delivers 'Undetectable' Backdoor to Steal Cloud Credentials

This title could be clearer and more informative.Try out Clickbait Shieldfor free (5 uses left this month).

APT41, the China-backed threat group, has deployed a zero-detection ELF backdoor targeting Linux-based cloud workloads across AWS, GCP, Azure, and Alibaba Cloud. The malware uses SMTP port 25 as a covert C2 channel, making it invisible to conventional scanning tools like Shodan and Censys, and carries zero detections on

5m read timeFrom darkreading.com
Post cover image
Table of contents
Typosquatting for EvasionDetection and Prevention

Sort: