News for hackers. Stuff that matters.
Re:New ultra-stealthy Linux backdoor isn’t your everyday mal... by BenjiWiebe on Friday June 10, 2022 @02:16PM (#31697582)
You could look at the maps of a process instead of the environ. That would show it.

Unless the ld_preload patches the process you are using to read the maps file, and gives you a false maps file.

There are no comments on this comment yet.