Tech »  Topic »  DinodasRAT Linux Malware Attack on Linux Servers to Gain Backdoor Access

DinodasRAT Linux Malware Attack on Linux Servers to Gain Backdoor Access


DinodasRAT, also known as XDealer, is a sophisticated C++ backdoor targeting multiple operating systems. It is designed to enable attackers to monitor and extract sensitive information from compromised systems covertly.

Notably, a Windows variant of this RAT was employed in attacks against government bodies in Guyana, an operation that was thoroughly analyzed by ESET researchers and named Operation Jacana.

Following ESET’s exposé in early October 2023, a previously unknown Linux variant of DinodasRAT was uncovered.

Indications suggest that this version, labeled V10 by the perpetrators, may have been active since 2022.

However, the first detected Linux variant, V7, dates back to 2021 and has not been publicly detailed. This report delves into the technical aspects of a Linux implant utilized by the attackers.

Are you from the SOC and DFIR Teams? – Analyse linux Malware Incidents & get live Access with ANY.RUN -> Start Now for Free.

Infection and ...


Copyright of this story solely belongs to gbhackers . To see the full text click HERE