s2
--:--:--UTC

Searching APEX

Starting…

  1. ○ Searching Threats, IOCs & Threat Intelligence locally
  2. ○ Querying external providers
  3. ○ Asking AI Forensic Validator
  4. ○ Creating new entry from validated hit

0s elapsed

TF-MAL-elf.unidentified_002

📛 Threat Title

Malware family: Unidentified Linux 002

Category: Unidentified Linux 002 First seen: Last updated: Source: ThreatFox Malwares

Description

ThreatFox malware family `elf.unidentified_002`. Printable name: Unidentified Linux 002.

Indicators of Compromise (0)

No indicators of compromise on this threat.

References (1)

Remediations (10)

  • RHSB-2026-002 Cryptographic Subsystem Privilege Escalation - Linux ...
    web:access.redhat.com

    Access Red Hat's knowledge, guidance, and support through your subscription.

  • Amazon Linux 2 Security Advisories
    web:alas.aws.amazon.com

    Below are bulletins for security or privacy events pertaining to Amazon Linux 2. You can also subscribe to our RSS feed.

  • Create or Modify System Process: Systemd Service, Sub-technique T1543 ...
    web:attack.mitre.org

    Systemd is the default initialization (init) system on many Linux distributions replacing legacy init systems, including SysVinit and Upstart, while remaining backwards compatible. Systemd utilizes unit configuration files with the .service file extension to encode information about a service's process.

  • Malicious behavior types - Sophos Central Admin
    web:docs.sophos.com

    This page explains the names we use for malicious behavior detected on computers or servers.

  • Linux-malware: Tracking interesting Linux (and Unix malware) - GitHub
    web:github.com

    Tracking interesting Linux (and UNIX) malware . Send PRs - timb-machine/ linux - malware

  • Essential Linux Tools for Malware Scanning and System Security
    web:linuxsecurity.com

    The takeaway: Linux malware keeps evolving, and it becomes clearer when you look at how secure Linux is. Attackers usually succeed because of misconfigurations, not the OS. Regular linux malware analysis and consistent use of a trusted linux malware scanner are essential to detect issues early and prevent serious damage.

  • Auto-Color: An Emerging and Evasive Linux Backdoor
    web:unit42.paloaltonetworks.com

    The new Linux malware named Auto-color uses advanced evasion tactics. Discovered by Unit 42, this article cover its installation, evasion features and more. The new Linux malware named Auto-color uses advanced evasion tactics. Discovered by Unit 42, this article cover its installation, evasion features and more.

  • Clear Linux or Mac System Logs (T1070.002) - CISA
    web:www.cisa.gov

    Description Adversaries may clear system logs to hide evidence of an intrusion. macOS and Linux both keep track of system or user-initiated actions via system logs. The majority of native system logging is stored under the <code>/var/log/</code> directory.

  • CVE-2026-31431: Copy Fail vulnerability enables Linux root privilege ...
    web:www.microsoft.com

    A high-severity Linux vulnerability, "Copy Fail" (CVE-2026-31431), enables root privilege escalation across cloud environments and Kubernetes workloads. With a working exploit already in the wild, organizations should act quickly to detect, mitigate, and reduce risk.

  • Mitigating malware and ransomware attacks - The National Cyber Security ...
    web:www.ncsc.gov.uk

    Malware attacks, in particular ransomware attacks, can be devastating for organisations because computer systems are no longer available to use, and in some cases data may never be recovered.

AI Forensic Analysis

Only Available for Registered Users. Sign in to view.