Linux rootkits explained – Part 1: Dynamic linker hijacking | Wiz Blog
Tags
maec-delivery-vectors: Watering Hole
attack-pattern: Data Models Credentials - T1589.001 Dynamic Linker Hijacking - T1574.006 Hooking - T1617 Malware - T1587.001 Malware - T1588.001 Ssh - T1021.004 System Checks - T1633.001 System Checks - T1497.001 Tool - T1588.002 Brute Force - T1110 Hooking - T1179 Rootkit - T1014 Hooking Rootkit
Show in Graph
Common Information
Type Value
UUID 54208047-f10d-44e5-9b80-8217d8e4dd60
Fingerprint 9d139b19a5241a88
Analysis status DONE
Considered CTI value 0
Text language
Published July 5, 2023, 9:34 a.m.
Added to db Nov. 19, 2023, 6:11 a.m.
Last updated Nov. 13, 2024, 9:32 a.m.
Headline Linux rootkits explained – Part 1: Dynamic linker hijacking
Title Linux rootkits explained – Part 1: Dynamic linker hijacking | Wiz Blog
Detected Hints/Tags/Attributes 58/2/3
Source URLs
Redirection Url
Details Source https://www.wiz.io/blog/linux-rootkits-explained-part-1-dynamic-linker-hijacking
URL Provider
Details Provider Source level domain
Details wiz.io www.wiz.io
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 398 ✔ Wiz Blog | RSS feed https://www.wiz.io/blog/rss 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 117 
ld.so
Details Domain 17 
ld-linux.so
Details Domain 1 
libhijackls.so