Linux Malware WolfsBane and FireWood Linked to Gelsemium APT
2 days ago — Gelsemium, active since at least 2014, is a highly sophisticated threat actor known for long-term, targeted attacks. According to ESET, the group’s recent focus on Linux systems highlights the growing trend among cybercriminals to exploit non-Windows platforms, which are increasingly deployed on servers, cloud environments and Internet of ...
Gelsemium APT Hackers Attacking Linux Servers With New …
3 days ago — While its connection to Gelsemium is less certain, it shares similarities with the group’s Project Wood malware. FireWood’s attribution to Gelsemium is made with low confidence, considering it could be a tool shared among multiple China-aligned APT groups. Maximizing Cybersecurity ROI: Expert Tips for SME & MSP Leaders – Attend Free Webinar
Chinese APT Gelsemium Targets Linux Systems with New ... - The Hacker News
2 days ago — The China-aligned advanced persistent threat (APT) actor known as Gelsemium has been observed using a new Linux backdoor dubbed WolfsBane as part of cyber attacks likely targeting East and Southeast Asia.
Chinese hackers target Linux with new WolfsBane malware
2 days ago — A new Linux backdoor called 'WolfsBane' has been discovered, believed to be a port of Windows malware used by the Chinese 'Gelsemium' hacking group. ESET security researchers who analyzed ...
Chinese hackers exploit Linux with new WolfsBane malware
1 day ago — ESET researchers uncover "WolfsBane," a Linux backdoor linked to the China-based Gelsemium group. This is Gelsemium's first known Linux malware—hinting at a change in attack strategies.
ESET Research discovers WolfsBane, new Linux cyberespionage …
3 days ago — For a more detailed analysis and technical breakdown of Gelsemium’s latest toolset, check out the latest ESET Research blogpost “Unveiling WolfsBane: Gelsemium’s Linux counterpart to Gelsevirine” on WeLiveSecurity.com. Make sure to follow ESET Research on Twitter (today known as X) for the latest news from ESET Research.
Unmasking WolfsBane: Gelsemium’s New Linux Weapon
2 days ago — ESET researchers have uncovered WolfsBane, a Linux cyberespionage backdoor attributed with high confidence to the Gelsemium advanced persistent threat (APT) group.This discovery is a major development, as it is the first public report of Gelsemium deploying Linux malware. The newly identified backdoors and tools are designed for cyberespionage, targeting sensitive data, including system ...
Unveiling WolfsBane: Gelsemium’s Linux counterpart to Gelsevirine
2 days ago — Gelsemium most likely acquires VPS from commercial providers. T1587.001. Develop Capabilities: Malware. Gelsemium develops its own custom malware. Execution. T1059.004. Command-Line Interface ...
Evasive Gelsemium hackers spotted in attack against Asian govt
Sep 23, 2023 — A stealthy advanced persistent threat (APT) tracked as Gelsemium was observed in attacks targeting a Southeast Asian government that spanned six months between 2022 and 2023.
Stealthy APT Gelsemium Seen Targeting Southeast Asian …
Sep 25, 2023 — A stealthy advanced persistent threat (APT) actor known as Gelsemium has been observed targeting a government entity in Southeast Asia to establish persistence and collect intelligence, cybersecurity firm Palo Alto Networks reveals.
- Some results have been removed