In December 2021, Intezer discovered a new multi-platform backdoor that targets Windows, Mac, and Linux. The Linux and Mac versions are fully undetected in VirusTotal. Intezer named this backdoor SysJoker.
GROUP:
MALWARE FAMILY:
SysJoker
ATT&CK IDS:
T1059 – Command and Scripting Interpreter, T1134 – Access Token Manipulation, T1070 – Indicator Removal on Host, T1036 – Masquerading, T1132 – Data Encoding, T1102.001 – Dead Drop Resolver
0 Comments