Daniel Roberson
  • Posts
  • About
  • Notes
  • Projects
  • Time
  • Posts
    About
    Notes
    Projects
    Time

credential stealer

0001-01-01

A credential stealer is a type of malware that collects and transmits discovered credentials to an unauthorized party.


Links to this note

  • Main Index
  • eburysshtrojan-gunderson2011
  • symbiote-kennedy2022
  • incidentresponse-luttgens2014
  • trackingteamtnt-fiser2021
  • china-linked hackers target Linux systems-antoniuk2024
  • unveiling wolfsbane-sperka2024
  • skuld-taniumcti2023
  • PAM modules - malicious
  • pamgoesrogue-sharma2003
  • most observed sshd backdoors shared the same rough feature set
  • sshbackdors-dumont2018
  • falseflags-kaspersky2017
  • 3snake
  • keylogger
  • Main Index - C
  • malware checking for known malware
  • OpenSSH 8 Password Backdoor
  • PAM API hooking
  • passwords.txt on desktop
  • replaces pam_unix.so with a malicious copy
  • Skidmap malware
  • Skuld malware

Recent Posts

Linux Persistence: Modular Software

2025-04-17 DFIR CTF persistence linux persistence apache asterisk

Linux Persistence: Web Shells

2025-04-16 DFIR persistence webshell linux persistence webshell apache nginx PHP

Linux Persistence: Rootkits

2025-04-15 DFIR persistence rootkit LKM linux persistence LKM rootkit LD_PRELOAD kprobe ftrace ld.so hooking

Linux Persistence: Processes

2025-04-11 DFIR persistence processes linux persistence processes

Defanging Linux LKM Rootkits With cleanup_module()

2025-04-05 Linux LKM rootkits EDR hooks incident response Linux LKM rootkit


Home

About

Notes

Projects

Time

© All rights reserved. Powered by Hugo and Erblog.