News for hackers. Stuff that matters.

A comment on New ultra-stealthy Linux backdoor isn’t your everyday malware discovery. Parent comment

Re:New ultra-stealthy Linux backdoor isn’t your everyday mal... by josephcsible on Friday June 10, 2022 @09:45AM (#31694110)
One of the easiest ways would be using a statically linked BusyBox. This works because statically linked binaries are unaffected by LD_PRELOAD, and BusyBox has equivalents of several of the tools that would find it if not for its hiding attempts.
[ Parent | on HN ]

There are no comments on this comment yet.