Hackers Plant GSocket on Linux Servers for Persistent Access

Hackers plant GSocket on Linux servers for persistent access

Multiple threat actors are abusing GSocket, a legitimate open-source remote access tool, to maintain access to Linux servers even after patching the vulnerabilities exploited to gain initial access.

GSocket Attacks Target Linux Servers with Persistent Access

Hackers are abusing GSocket to maintain hidden access to Linux servers. Microsoft reports a 356.2% increase in malicious activity.

Hackers plant GSocket on Linux servers for persistent access | #hacking | #cybersecurity | #infosec | #comptia | #pentest | #hacker - National Cyber Security Consulting

Multiple threat actors are abusing GSocket, a legitimate open-source remote access tool, to maintain access to Linux servers even after patching the vulnerabilities exploited to gain initial access. Since March, detections of malicious GSocket activity have increased, particularly in attacks targeting web applications and hosting environments. GSocket allows attackers to reach systems behind firewalls or […] Thank you for subscribing to our RSS …

Microsoft Warns Hackers Are Using GSocket Backdoors to Keep Linux Servers Compromised After Patching

Microsoft has warned that attackers are using a free remote access tool called GSocket to stay inside Linux servers even after the original security hole is fixed. Many admins treat a patch as the end of an incident, but this activity shows that patching alone may leave the attacker’s access untouched. GSocket is an open […]

The global socket: how threat actors are weaponizing GSocket for stealthy C2

Threat actors are deploying GSocket on compromised Linux servers to keep encrypted remote access after the original vulnerability is patched. Learn how to… Read more →