Unveiling sedexp: A Stealthy Linux Malware Exploiting udev Rules

Tags

External References

• https://www.aon.com/
• https://otx.alienvault.com/

Description

Stroz Friedberg discovered sedexp, a stealthy Linux malware that utilizes udev rules to achieve persistence and evade detection. It provides reverse shell capabilities and advanced concealment tactics. Employed by a financially motivated threat actor, sedexp hides credit card scraping code, indicating a focus on financial gain. Despite being active since 2022, multiple public instances had zero detections, highlighting its evasive nature.

Date