Black Lotus Labs identified “Showboat,” a Linux post-exploitation framework tied to PRC-aligned telecom targeting campaigns.

[technadu@infosec.exchange]

Black Lotus Labs identified “Showboat,” a Linux post-exploitation framework tied to PRC-aligned telecom targeting campaigns.

Researchers say the malware enabled persistence, proxying, remote shell execution, and maintained a 0% VirusTotal detection rate for months.

Showboat: A Novel Linux Post-Exploitation Framework Targeting Telecommunications

Showboat is a novel Linux post-exploitation framework utilized by PRC-aligned actors to target global telecommunications providers.

TechNadu (www.technadu.com)

#Cybersecurity #Linux #Malware #ThreatIntel