malware checking for security software
0001-01-01
malware often attempts to determine if security tools or reverse engineering software is running on a host as a defensive measure. The malware, if it ...
Read More
malware development
0001-01-01
malware development is the process of creating malware using software development practices.
Read More
malware disabling SELinux
0001-01-01
Some examples of Linux malware such as the Skidmap malware will disable SELinux by running commands such as:
Read Moreecho 0 > /selinux/enforce setenforce 0 ...
malware disguising User-Agent strings
0001-01-01
Often, malware or malicious actors will change the values of their User-Agent to circumvent security measures or avoid fingerprinting by security ...
Read More
malware family
0001-01-01
A malware family is a group of malware that shares similar traits and a common code base.
Read More
malware gathering system information
0001-01-01
malware often gathers information about a system such as its physical specs, networking configuration, operating system name and version, process ...
Read More
malware installing additional software
0001-01-01
malware or threat actors may install additional software using the system’s package manager or official install media on compromised systems to ...
Read More
malware propagation
0001-01-01
malware propagation refers to the techniques and mechanisms used by malware to spread from one system to another.
Read More
malware replacing legitimate system components
0001-01-01
A common tactic of malware is to replace legitimate components of a system with modified, malicious versions.
For example, the ping program on Linux ...
Read More
malware setting files as immutable or append only
0001-01-01
Some malware on Linux and Unix-like systems will set immutable or append only filesystem attributes on their files to make them harder for a systems ...
Read More