[security] New SysJoker backdoor targets Windows, macOS, and Linux
3 messages · started by Devi Garcia on Jan 12, 2022
[security] New SysJoker backdoor targets Windows, macOS, and Linux
From Devi Garcia · Jan 12, 2022
A new multi-platform backdoor malware named 'SysJoker' has emerged in the wild, targeting Windows, Linux, and macOS with the ability to evade detection on all three operating systems.
The discovery of the new malware comes from researchers at Intezer who first saw signs of its activity in December 2021 after investigating an attack on a Linux-based web server.
The first uploads of the malware sample on VirusTotal occurred in H2 2021, which also aligns with the C2 domain registration times.
The security analysts have now published a detailed technical report on SysJoker, which they shared with Bleeping Computer before publication.
[security] New SysJoker backdoor targets Windows, macOS, and Linux
From Devi Garcia · Jan 12, 2022
A new multi-platform backdoor malware named 'SysJoker' has emerged in the wild, targeting Windows, Linux, and macOS with the ability to evade detection on all three operating systems.
The discovery of the new malware comes from researchers at Intezer who first saw signs of its activity in December 2021 after investigating an attack on a Linux-based web server.
The first uploads of the malware sample on VirusTotal occurred in H2 2021, which also aligns with the C2 domain registration times.
The security analysts have now published a detailed technical report on SysJoker, which they shared with Bleeping Computer before publication.
Re: [security] New SysJoker backdoor targets Windows, macOS, and Linux
From Teruel deCampo MD · Jan 12, 2022
directory which I have never seen used by any program ( may be wrong
here).
The study of virus is a complex topic please if you find more stuff
about this topic post it. Here a simple (and most likely ineffective) way to offer some warning:
check for the presence of the ~/.Library directory for example: #!/bin/bash d=.Library
while [ ! -d "${d}" ]
do
sleep 5s
done
echo "Directory $d found." Of course is not robust :-) place the batch in ~/ then run it. Many years back we were playing with virus mainly in bulletin boards
but were simple, small and written in ASM. There was a book that
describe more or less accurate the environment o those times. Nice fun
reading The Cybergypsies
ISBN-10 : 0684819295 Cu hope tomorrow. -=teruel=- On Wed, 2022-01-12 at 03:39 +0000, Devi Garcia wrote:
Quoted reply (3 lines)
https://www.bleepingcomputer.com/news/security/new-sysjoker-backdoor-targets-windows-macos-and-linux/
https://www.bleepingcomputer.com/news/security/new-sysjoker-backdoor-targets-windows-macos-and-linux/
Cochise Linux Users Group Mailing List - cochiselinux@freelists.org
For more information: https://cochiselinuxusergroup.org/
Mailing List Archive: https://www.freelists.org/archive/cochiselinux
To unsubscribe: //www.freelists.org/list/cochiselinux