Topic: rootkit capabilities
-
Chinese Hackers Hide ToneShell Malware with Rootkit
A new cyberespionage campaign targets Asian governments using an advanced kernel-mode rootkit to deploy the ToneShell backdoor, attributed to the Mustang Panda hacking group. The rootkit employs sophisticated stealth techniques, including a stolen certificate, dynamic API resolution, and active i...
Read More » -
SonicWall SMA Devices Still Infected with Stealthy OVERSTEP Malware
Cybersecurity experts discovered a malware campaign targeting outdated SonicWall SMA 100 devices, deploying the stealthy OVERSTEP backdoor via stolen admin credentials and potential vulnerabilities. The OVERSTEP malware hijacks system functions, steals sensitive data, and evades detection, with a...
Read More »