Unveiling WolfsBane: Gelsemium’s Linux counterpart to Gelsevirine
2 days ago · The WolfsBane dropper can create a new system service for persistence. T1574.006. Hijack Execution Flow: Dynamic Linker Hijacking. The WolfsBane Hider rootkit abuses the ld.so.preload preload ...
Chinese hackers target Linux with new WolfsBane malware
2 days ago · A new Linux backdoor called 'WolfsBane' has been discovered, believed to be a port of Windows malware used by the Chinese 'Gelsemium' hacking group. ESET security researchers who analyzed ...
Gelsemium APT Hackers Attacking Linux Servers With New WolfsBane …
3 days ago · Key Features of WolfsBane:-Custom libraries for network communication; Sophisticated command execution mechanism; Similar configuration structure to its Windows counterpart; Use of previously known Gelsemium-associated domains; Alongside WolfsBane, researchers discovered another Linux backdoor named FireWood. While …
Chinese APT Gelsemium Targets Linux Systems with New WolfsBane …
2 days ago · The China-aligned advanced persistent threat (APT) actor known as Gelsemium has been observed using a new Linux backdoor dubbed WolfsBane as part of cyber attacks likely targeting East and Southeast Asia.
ESET Research discovers WolfsBane, new Linux cyberespionage …
3 days ago · For a more detailed analysis and technical breakdown of Gelsemium’s latest toolset, check out the latest ESET Research blogpost “Unveiling WolfsBane: Gelsemium’s Linux counterpart to Gelsevirine” on WeLiveSecurity.com. Make sure to follow ESET Research on Twitter (today known as X) for the latest news from ESET Research. WolfsBane ...
Chinese hackers exploit Linux with new WolfsBane malware
1 day ago · ESET researchers uncover "WolfsBane," a Linux backdoor linked to the China-based Gelsemium group. This is Gelsemium's first known Linux malware—hinting at a change in attack strategies.
Linux devices hit with even more new malware, this time
2 days ago · ESET discovers a new piece of malware called WolfsBane This malware features a dropper, a launcher, and a backdoor It is being used by a group known as Gelsemium Chinese hackers have built new all ...
Linux Malware WolfsBane and FireWood Linked to Gelsemium APT
2 days ago · Recent discoveries have unveiled two new malware strains, WolfsBane and FireWood, targeting Linux systems. These advanced tools have been attributed by ESET to the notorious Gelsemium Advanced Persistent Threat (APT) group, a cyber-espionage entity with a history of targeting government, business and critical infrastructure sectors.. WolfsBane and FireWood Malware Tools
Researchers unearth two previously unknown Linux backdoors
2 days ago · Researchers discovered the WolfsBane samples at VirusTotal, uploaded from Taiwan, the Philippines, and Singapore, likely originating from an incident response on a compromised server.
Unmasking WolfsBane: Gelsemium’s New Linux Weapon
2 days ago · ESET researchers have uncovered WolfsBane, a Linux cyberespionage backdoor attributed with high confidence to the Gelsemium advanced persistent threat (APT) group.This discovery is a major development, as it is the first public report of Gelsemium deploying Linux malware. The newly identified backdoors and tools are designed for cyberespionage, targeting sensitive data, including system ...