New Linux PamDOORa Backdoor Uses PAM Modules to Steal SSH Credentials

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-05-08 08:41 UTC
  • Importiert: 2026-05-18 09:49 UTC
  • Quelle-ID: thn_global
  • uid_hash: cbcb7412796367a35ba61e4a7b4bc0f6f3762e9e8e23a46916e6faf35d29d24a

Inhalt

Cybersecurity researchers have disclosed details of a new Linux backdoor named PamDOORa that's being advertised on the Rehub Russian cybercrime forum for $1,600 by a threat actor called "darkworm." The backdoor is designed as a Pluggable Authentication Module (PAM)-based post-exploitation toolkit that enables persistent SSH access by means of a magic password and specific TCP port combination.

No data

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

security_news - de https://feeds.feedburner.com/TheHackersNews