This new Linux malware is 'almost impossible' to detect

Symbiote is parasitic malware that provides rootkit-level functionality

A joint research effort has led to the discovery of Symbiote, a new form of Linux malware that is "almost impossible" to detect.

Symbiote has several interesting features. For example, the malware uses Berkeley Packet Filter (BPF) hooking, a function designed to hide malicious traffic on an infected machine. BPF is also used by malware developed by the Equation Group.

The malware is pre-loaded before other shared objects, allowing it to hook specific functions – including libc and libpcap – to hide its presence. Other files associated with Symbiote are also concealed and its network entries are continually scrubbed.

https://www.zdnet.com/article/this-new-linux-malware-is-almost-impossible-to-detect/

#linux #symbiote #malware

0xor0ne@infosec.exchange - Great website if you need a quick reference to Linux kernel syscalls (numbers)

https://syscalls.mebeim.net

#Linux #kernel #programming

0xor0ne@infosec.exchange - Nice project that collects the best Wi-Fi USB dongle with good Linux support
It contains a lot of up-to-date useful information

https://github.com/morrownr/USB-WiFi

#wireless #wifi #Linux #usbwifi

0xor0ne@infosec.exchange - Very cool series about persistence in Linux environments

Persistence map: https://pberba.github.io/assets/posts/common/20220201-linux-persistence.pdf

Auditd, Sysmon, Osquery: https://pberba.github.io/security/2021/11/22/linux-threat-hunting-for-persistence-sysmon-auditd-webshell/

Account Creation and Manipulation: https://pberba.github.io/security/2021/11/23/linux-threat-hunting-for-persistence-account-creation-manipulation/

Systemd, Timers, and Cron: https://pberba.github.io/security/2022/01/30/linux-threat-hunting-for-persistence-systemd-timers-cron/

Initialization Scripts and Shell Configuration: https://pberba.github.io/security/2022/02/06/linux-threat-hunting-for-persistence-initialization-scripts-and-shell-configuration/

Systemd Generators: https://pberba.github.io/security/2022/02/07/linux-threat-hunting-for-persistence-systemd-generators/

#Linux #kernel #malware #cybersecurity #infosec

#Speech Note Transcribes #Voice to #Text on #Linux

https://www.omglinux.com/speech-note-transcribe-voice-to-text-on-linux/

#Linux Desktop application that provides live #captioning

FUTO Fellowship program interview; linux captions software

👉 Live Captions github: https://github.com/abb128/LiveCaptions

🔵 Q&A w/ billionaire alt-tech investor/philanthropist Eron Wolf
https://www.youtube.com/watch?v=OJPmbcU-Vzo
🔵 FUTO Fellows program: https://futo.org/fellows/
🔵 FUTO Youtube channel - @futotech
⚠️ Google's breaches of privacy have gone TOO FAR!
https://www.youtube.com/watch?v=_vWAF13KigI

#speech #recognition #stt #voice

15 Best Tools for #Linux #Font Management

https://www.ubuntupit.com/best-linux-font-tools-and-how-to-install-linux-fonts-on-ubuntu/

@BonesTechGarage

11 Best Note-Taking Apps for #Linux in 2024

https://www.tecmint.com/note-taking-apps-linux/

@BonesTechGarage
#notes

How to Anonymize Your Linux System with Whoami

#Whoami is a comprehensive toolkit that can anonymize a running #Linux session. It comes with scripts that can hide your machine’s real IP address, change its default DNS resolvers, and secure your browser. This article will show you how to install Whoami and run some of its modules to anonymize your Ubuntu system.

Note: Don’t confuse this with the whoami command that displays the username of the current user. Also, Whoami works for any Debian and Arch based distro.

https://www.maketecheasier.com/anonymize-linux-with-whoami/

@BonesTechGarage

#NVIDIA 560 #Linux Graphics #Driver to Fully Adopt Open-Source GPU Kernel Modules

https://9to5linux.com/nvidia-560-linux-graphics-driver-to-fully-adopt-open-source-gpu-kernel-modules