Top all-time · #2263
Intezer
Company blog · intezer.com/blogsecurity
Intezer is the company blog at intezer.com, writing about security. Since 2017, 33 different Hacker News readers have linked it 34 times, most often “Symbiote Deep-Dive: Analysis of a New, Nearly-Impossible-to-Detect Linux Threat”. No feed was found, so read it on the site itself.
Intezer AI SOC investigates 100% of alerts at forensic depth, escalates fewer than 2% to a human and returns verdicts in under a minute. Book a demo.
Most-linked posts?
- Symbiote Deep-Dive: Analysis of a New, Nearly-Impossible-to-Detect Linux Threat4 people · 4 mentions · first linked 2022-06-09
- How We Escaped Docker in Azure Functions2 people · 2 mentions · first linked 2021-01-29
- New Chinese Linux malware turning to Golang2 people · 2 mentions · first linked 2020-05-05
- EvilGnome: Rare Malware Spying on Linux Desktop Users2 people · 2 mentions · first linked 2019-07-22
- Symbiote: A New, Nearly-Impossible-to-Detect Linux Threat (2022)2 people · 2 mentions · first linked 2024-07-01
What Hacker News says?
And it isn't too difficult for something to elevate itself to root anyways. It could just include a basic key-logger which would work on most systems and wait for your password. Unless you're on Wayland, you can see for yourself by typing `xinput list` and `xinput test <id>` using the id of your keyboard. edit: and another comment linked to a blog post which also explains how this specific malware gains root https:/…
Comment linking /blog/research/new-linux-threat-symbiote/
on “New ultra-stealthy Linux backdoor isn’t your everyday malware discovery”Submitted New SysJoker Backdoor Targets Windows, Linux, and macOS as a story · 134 points
HN discussionDirect link to the blog post with all details https://www.intezer.com/blog/research/new-linux-threat-symbi...
Comment linking /blog/research/new-linux-threat-symbiote/
on “New ultra-stealthy Linux backdoor isn’t your everyday malware discovery”Submitted EvilGnome: Rare Malware Spying on Linux Desktop Users as a story · 101 points
HN discussion> "Genuinely, would you be happy with just container isolation between you and other customers of your cloud provider? Most people absolutely would not." But that's exactly how VPS hosting works today - you don't get your own private blade unless you're ready to pay premium prices and have the competence needed to run them yourself. The technicalities of how private resources in a VPS are isolated from each other wi…
Comment linking /blog/research/how-we-escaped-docker-in-azure-functions/
on “How we secure Monzo's banking platform”Submitted HiddenWasp Malware Stings Targeted Linux Systems as a story · 67 points
HN discussionWhat are the odds of some of these software peddlers being in the malware business directly or indirectly? The chances of them happening to want you to download an otherwise unknown piece of stuff and run it privileged seem to be more of a risk than that you have the malware on your system. Does anybody know what came of this? https://www.intezer.com/blog/malware-analysis/hiddenwasp-mal... Did the threat materialize…
Comment linking /blog/malware-analysis/hiddenwasp-malware-targeting-linux-systems/
on “New SysJoker Backdoor Targets Windows, Linux, and macOS”Submitted OrBit: New Undetected Linux Threat Uses Unique Hijack of Execution Flow as a story · 55 points
HN discussionAgreed that it still seems decently hard to find if you aren't looking for it. Though the tone of the blog post made a lot more sense to me when I saw the over-top-top title of the article[0] it's responding to: 'Analysis of a New, Nearly-Impossible-to-Detect Linux Threat': [0] https://intezer.com/blog/research/new-linux-threat-symbiote/
Comment linking /blog/research/new-linux-threat-symbiote/
on “Userland rootkits are lame (2022)”Submitted MirageFox: APT15 Resurfaces with New Tools Based on Old Ones as a story · 6 points
HN discussionoriginal src: https://www.intezer.com/blog/research/new-linux-threat-symbi... an attack targetting brazilian linux users
Comment linking /blog/research/new-linux-threat-symbiote/
on “Symbiote: A New, Nearly-Impossible-to-Detect Linux Threat”Submitted Symbiote Deep-Dive: Analysis of a New, Nearly-Impossible-to-Detect Linux Threat as a story · 3 points
HN discussionhttps://www.intezer.com/blog/malware-analysis/new-linux-back... This linked source article has much more detail.
Comment linking /blog/malware-analysis/new-linux-backdoor-redxor-likely-operated-by-chinese-nation-state-actor/
on “Linux systems under attack by new RedXOR malware”Submitted We Hacked Azure Functions and Escaped Docker as a story · 3 points
HN discussionSubmitted ElectroRAT: Attacker Creates Fake Companies to Drain Crypto Wallets as a story · 3 points
HN discussionSubmitted Symbiote: A New, Nearly-Impossible-to-Detect Linux Threat (2022) as a story · 2 points
HN discussionSubmitted Lightning Framework is a new undetected Swiss Army Knife-like Linux malware as a story · 2 points
HN discussionSubmitted Chainjacking Supply Chain Attack Explained. Low Probability but Nice Research as a story · 2 points
HN discussionSubmitted New attacks on Kubernetes via misconfigured Argo Workflows as a story · 2 points
HN discussionSubmitted How We Escaped Docker in Azure Functions as a story · 2 points
HN discussionSubmitted EvilGnome: Rare Malware Spying on Linux Desktop Users as a story · 2 points
HN discussionSubmitted Silence of the Moles: Code Reuse in Malware Loaders as a story · 2 points
HN discussionSubmitted China PLA who hacked Google 8 years ago, might be behind the CCleaner hack as a story · 2 points
HN discussionSubmitted How a Global Phishing Campaign Targets Energy Sector and Its Suppliers as a story · 1 points
HN discussionSubmitted New Golang Worm Drops XMRig Miner on Servers as a story · 1 points
HN discussionSubmitted Intezer – New Chinese Linux Malware Turning to Golang as a story · 1 points
HN discussionSubmitted New Chinese Linux malware turning to Golang as a story · 1 points
HN discussionSubmitted New Iranian Campaign Tailored to US Companies Utilizes an Updated Toolset as a story · 1 points
HN discussionSubmitted Examining Code Reuse Reveals Undiscovered Links Among N.Korea’s Malware Families as a story · 1 points
HN discussionSubmitted Lazarus Group Targets More Cryptocurrency Exchanges and FinTech Companies as a story · 1 points
HN discussion
