ThreatVectr
Tag

#linux-rootkit

2 stories taggedlinux-rootkit.

A network load balancer device display with memory usage graphs and running processes listed, with highlighted PHP application threads suggesting hidden injecte
Threat Intelligence

Stealthy Linux rootkit hides inside F5 BIG-IP devices and runs entirely from memory

Researchers say the implant, tracked by ESET as PoisonedRefresh, hooks Apache to slip a hidden web shell into legitimate PHP files without ever touching disk.

4 min read
A server room with multiple rack units and blinking status lights, with command-line interface and Linux terminal windows displayed on monitoring screens
Threat Intelligence

Chinese-speaking crew UAT-10147 hits web servers with AI-built tools and a Linux rootkit

The group targets Windows and Linux servers across education, media, tech and gaming, with victims concentrated in Brazil, Bolivia, China, Canada and Vietnam.

4 min read
© 2026 Threat Vectr