APT36 Targets BOSS Linux with Sophisticated Malware
APT36, a cyberespionage group, has escalated its campaign against government institutions with sophisticated Python-based ELF malware targeting Linux-based BOSS operating environments. The campaign uses spear-phishing emails with weaponized Linux shortcut files masquerading as legitimate documents. The malware establishes persistence through systemd user services and registry modifications, ensuring survival across reboots. It performs comprehensive system reconnaissance and supports a complete command set for data exfiltration and remote control.
Latest mentioned: 12-01
Earliest mentioned: 12-01