New ultra-stealthy Linux backdoor isn’t your everyday malware discovery
arstechnica.com
Symbiote gives remote access to any account. Normal methods don't detect it.
  • @Thann
    3•2 years ago

    With the help of LD_PRELOAD, Symbiote will load before any other shared objects. That allows the malware to tamper with other library files loaded for an application. The image below shows a summary of all of the malware’s evasion techniques.