#Rootkit

Practical IT guides, comparisons, explainers and news — curated by practitioners.

Guides, insights and practical advice
Infrastructure, cloud and security
Clear explanations and real-world context
For sysadmins, IT admins and MSPs

All Articles

Browse articles tagged Rootkit.

1 article foundMalwareRemove topic filter Clear filters

Wide Sophos X-Ops cybersecurity cover showing a Linux implant on compromised F5 BIG-IP APM appliances that hooks Apache and PHP, injects an in-memory web shell, and opens a second backdoor through a local UNIX socket.

Linux rootkit on F5 BIG-IP APM hides its web shell in memory

Sophos X-Ops has dissected a Linux implant found on compromised F5 BIG-IP APM appliances. It hooks Apache and PHP to inject a web shell into memory, leaving the scripts on disk untouched, and opens a second backdoor over a local UNIX socket.

Sep 11, 20269 min readEmanuel De Almeida