News for hackers. Stuff that matters.

A comment on Stealthy Linux rootkit found in the wild after going undetected for 2 years. Parent comment

Re:Stealthy Linux rootkit found in the wild after going unde... by mort96 on Sunday December 10, 2023 @10:05AM (#38591951)
Create a bunch of burner Google accounts and use Google Drive or Docs or Calendar as C&C?
[ Parent | on HN ]
Re:Stealthy Linux rootkit found in the wild after going unde... by franga2000 on Sunday December 10, 2023 @11:30AM (#38592686)
I've used Google App Script for C&C in a demo before. It's HTTPS traffic going to a Google IP and the domain is script.google.com - what looks more legit than that?
[ Parent | on HN ]