Wizard Spider
2026-09-11
Wizard Spider aka Trickbot, DEV-0193, UNC2053, Periwinkle Tempest is a criminal hacker group with a member count of approximately 80, based around Saint Petersburg, Russia. Some members may be based in Ukraine.
https://en.wikipedia.org/wiki/Wizard_Spider
Linux Persistence: Modular Software
2025-04-17 DFIR CTF persistence linux persistence apache asterisk
Linux Persistence: Web Shells
2025-04-16 DFIR persistence webshell linux persistence webshell apache nginx PHP
Linux Persistence: Rootkits
2025-04-15 DFIR persistence rootkit LKM linux persistence LKM rootkit LD_PRELOAD kprobe ftrace ld.so hooking