Excerpt
10 min read
1 day ago
Static and dynamic analysis of Auto-Color’s execution flow, C2 communication, and LD_PRELOAD rootkit. Auto-Color in a Nutshell
Auto-Color is an emerging Linux backdoor first documented by Palo Alto Networks Unit 42 in February 2025. The earliest known samples were collected between November and December 2024, with universities and government offices in North America and Asia being the main observed targets. The family was named after the filename used by the payload after installation. Its initial delivery method is still unknown, but…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by Medium on medium.com.
Mentioned in the excerpt
More from Medium19
- Taiwan High-Tech Ecosystem Targeted by Foreign APT Group:Medium · Published 10 Jun 2022
- Lx(Base) RAT: A Technical Deep DiveMedium · Published 3 Aug
- 1337_GTWK Linux Malware AnalysisMedium · Published 30 Jul
- MetaStealer traffic, new DGAs and analyzing the “tracker” backdoor DGA with AIMedium · Published 17 Jun
On the same topics
- Lorem Ipsum Revisited: ClickFix Pivot & Rapid BrigantineBlueVoyant · Added 25 Oct
- From PostCSS Masquerading to Windows RATJFrog · Published 22 Jun
- Showboat Malware: Emerging Threats Targeting Telecom ProvidersLumen Black Lotus Labs · Added 25 Oct
- International law enforcement initiate hunt on malware group SocGholishDutch National Police · Published 18 Jun
