Tag: kernel rootkit

2 Attack Reports | 0 Vulnerabilities

Attack reports

Threat Bulletin: Fire in the Woods – A New Variant of FireWood

A new, low-detected variant of the FireWood Linux backdoor has been discovered, showing changes in implementation and configuration while maintaining core functionality. This backdoor, linked to the 'Project Wood' malware lineage, operates as a remote access trojan on Linux systems, using kernel-le…
linux
backdoor
rat
kernel rootkit
project wood
firewood
2025-08-15
tea encryption
Published: August 15, 2025
Downloadable IOCs: 0

The Nanshou Campaign - Hackers' Arsenal Grows Stronger

This comprehensive analysis details a sophisticated cyber campaign targeting over 50,000 Windows servers worldwide, primarily in the healthcare, telecommunications, media, and IT sectors. The campaign exploited vulnerabilities in MS-SQL and phpMyAdmin, dropping advanced payloads like crypto-miners …
privilege escalation
vulnerability exploitation
2024-09-16
smominru
CVE-2014-4113
database servers
kernel rootkit
crypto-miner
Published: September 16, 2024
Linked vulnerabilities : CVE-2014-4113
Downloadable IOCs: 28
Click here to see more Attack Reports