[Intel]: https://github.com/croemheld/lkm-rootkit

[timb-machine]

Area

Malware PoCs

Parent threat

Persistence, Defense Evasion, Privilege Escalation, Exfiltration, Command and Control

Finding

https://github.com/croemheld/lkm-rootkit

Industry reference

attack:T1014:Rootkit
attack:T1547.006:Kernel Modules and Extensions
attack:T1564.001:Hidden Files and Directories
attack:T1548:Abuse Elevation Control Mechanism
attack:T1205.001:Port Knocking
attack:T1095:Non-Application Layer Protocol
attack:T1020:Automated Exfiltration
attack:T1048.003:Exfiltration Over Unencrypted Non-C2 Protocol
attack:T1056.001:Keylogging

Malware reference

No response

Actor reference

No response

Component

Linux

Scenario

No response