Attributed metadata history
Up to 100 retained publisher events per page for 0184d1164da062825ffd087b22816edaaa21f23b38686e037d2b339212abe53c. Withdrawals and unavailable references remain attributed to their publishers.
intelligence_src_636032c91a0b4c9a97
observed · 2026-10-12 10:37:04 UTC
Linux backdoors targeting telecom and network appliances in South Korea and Taiwan have been disguising their traffic as email services and seemingly legitimate processes to blend in and evade detection. Threat actors are known to name their malicious software after a legitimate operating system component or a process as a defense evasion measure. By borrowing the name of a real binary, it may
Fingerprint: 85c1248ea6ac9239b71c1eb1b26a831f45d6060b9de65095e7ed3c5f98bc823b
intelligence_src_636032c91a0b4c9a97
observed · 2026-10-12 10:37:03 UTC
available
Fingerprint: cc58046b4b1d7fb963844e45a69d2195cff987918478e05287925b56bc65734d