Linux PamDOORa: New Backdoor Steals SSH Credentials via PAM

Date:

New Linux Backdoor PamDOORa Poses Significant Threat to Security

Cybersecurity experts have recently uncovered a new Linux backdoor named PamDOORa, sold for $900 on a Russian cybercrime forum. Created by the hacker known as “darkworm,” this malware allows unauthorized access to Linux systems by exploiting the Pluggable Authentication Module (PAM) framework.

PamDOORa targets systems using SSH, enabling attackers to harvest credentials from legitimate users and maintain persistent access. Although there are no confirmed real-world attacks yet, the potential for widespread harm is concerning, especially for organizations relying on Linux servers.

To protect against such threats, experts recommend regularly updating systems, monitoring PAM configurations, and employing strong authentication measures.

Risk Level: High
The emergence of PamDOORa highlights the evolving landscape of cyber threats, emphasizing the need for vigilance in safeguarding sensitive systems.

Source: View Original Report

Share post:

spot_imgspot_img

Popular

More like this
Related

WPScan 4.0.0: Critical XSS Vulnerability Exposed!

WordPress Vulnerability Report: WPScan 4.0.0 Released Introduction The latest version of...

119 Edge Extensions: Malware Disguised as Useful Tools

Cybersecurity Alert: Malware Infiltrates Popular Browser Extensions A recent malware...

200K WordPress Sites Face XSS Risk from Burst Statistics Plugin

Critical Vulnerability Discovered in Burst Statistics Plugin for WordPress On...

Foxconn Cyberattack: Nitrogen Ransomware Strikes WordPress Sites

Cyberattack Hits Foxconn: Major Data Breach Reported Foxconn, the largest...