Skip to content

Aggregating Cyber Insights

Articles
Breaches
Learning
News
Podcast
Research
Toolkit
Vulnerabilities
Webinars
About Us

Home
Vulnerabilities
From Cybersecurity Help – New Auto-Color Linux backdoor targets universities and gov’t offices in North America and Asia

From Cybersecurity Help – New Auto-Color Linux backdoor targets universities and gov’t offices in North America and Asia

Posted inVulnerabilities

From Cybersecurity Help – New Auto-Color Linux backdoor targets universities and gov’t offices in North America and Asia

Posted by

shaikh Saqib February 26, 2025

Auto-Color can maintain access over extended periods.

Tags:

/etc/ld.preload /proc/net/tcp /var/log/cross/auto-color arbitrary commands Asia attack methods Auto-Color benign names BlackBerry C2 communications command-and-control server custom encryption cyber awareness cyber defense cyber protection cyber threats cybersecurity detection challenges digital privacy door dynamic configuration egg evasive malware exploits file execution file modification forward attacker traffic government organizations infosec intercept system calls kill switch mechanism libc functions libcext.so.0 libcext.so.2 Linux backdoor log malicious library implant malware persistence network security North America note online security Palo Alto Networks proxy remote access reverse shell root access root privileges rootkit security security perspective security tools Symbiote Linux malware threat threat intelligence threat note threatnote Unit 42 universities vulnerabilities zero days

Last updated on February 27, 2025

Search

Latest Posts

From Cyber Security News – New Infostealer Campaign Uses GitHub Releases for Payload Hosting and EvasionMay 8, 2026
From Cyber Security News – Hackers Abuse Signed Logitech Installer to Deploy TCLBANKER Banking TrojanMay 8, 2026
From Cyber Security News – DarkMoon AI-Powered Autonomous Penetration Testing Platform With 50+ ToolsMay 8, 2026
From Security Week – Polish Security Agency Reports ICS Breaches at Five Water Treatment PlantsMay 8, 2026
From Cyber Security News – Trellix Breach – RansomHouse Claims Access to Parts of Source CodeMay 8, 2026

Total Visitors

Archives

Copyright 2026 — Threat Note. All rights reserved. Bloghash WordPress Theme