New ‘Plague’ PAM Backdoor Exposes Critical Linux Systems to Silent Credential Theft

New ‘Plague’ PAM Backdoor Exposes Critical Linux Systems to Silent Credential Theft

/in

Cybersecurity researchers have flagged a previously undocumented Linux backdoor dubbed Plague that has managed to evade detection for a year.
“The implant is built as a malicious PAM (Pluggable Authentication Module), enabling attackers to silently bypass system authentication and gain persistent SSH access,” Nextron Systems researcher Pierre-Henri Pezier said.
Pluggable Authentication Modules

The Hacker News – ​Read More

US Government Begins $200M Payouts to Backpage.com Trafficking VictimsCL-STA-0969 Installs Covert Malware in Telecom Networks During 10-Month Espionage CampaignCL-STA-0969 Installs Covert Malware in Telecom Networks During 10-Month Espionage...