Linux malware “perfctl” behind years-long cryptomining campaign
Tags
cmtmf-attack-pattern: Masquerading
attack-pattern: Direct Credentials - T1589.001 Encrypted Channel - T1521 Encrypted Channel - T1573 Malware - T1587.001 Malware - T1588.001 Masquerading - T1655 Server - T1583.004 Server - T1584.004 Software - T1592.002 Ssh - T1021.004 Connection Proxy - T1090 Masquerading - T1036 Rootkit - T1014 Masquerading Rootkit
Show in Graph
Common Information
Type Value
UUID 0cf6609f-d24a-4024-b270-97eab9a86bea
Fingerprint 8588b92d251a7565
Analysis status DONE
Considered CTI value 2
Text language
Published Oct. 3, 2024, midnight
Added to db Oct. 3, 2024, 5:33 p.m.
Last updated Nov. 13, 2024, 10:22 p.m.
Headline Linux malware “perfctl” behind years-long cryptomining campaign
Title Linux malware “perfctl” behind years-long cryptomining campaign
Detected Hints/Tags/Attributes 40/2/5
Source URLs
Redirection Url
Details Source https://www.bleepingcomputer.com/news/security/linux-malware-perfctl-behind-years-long-cryptomining-campaign/
URL Provider
Details Provider Source level domain
Details bleepingcomputer.com www.bleepingcomputer.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 279 ✔ BleepingComputer https://www.bleepingcomputer.com/feed/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details CVE 51 
cve-2023-33246
Details CVE 60 
cve-2021-4034
Details CVE 28 
cve-2021-4043
Details Domain 4 
libgcwrap.so
Details Domain 117 
ld.so