In a sign that cybersecurity researchers continue to be under the radar of malicious actors, a proof-of-concept (PoC) has been discovered on GitHub, concealing a backdoor with a “crafty” persistence method.
“In this instance, the PoC is a wolf in sheep’s clothing, harboring malicious intent under the guise of a harmless learning tool,” Uptycs researchers Nischay Hegde and Siddartha Malladi said. “Operating as a downloader, it silently dumps and executes a Linux bash script, all the while disguising its operations as a kernel-level process.”
