Page 1 of 1

New stealthy Pumakit Linux rootkit malware spotted in the wild

Posted: Mon Dec 16, 2024 4:14 pm
by Shane1145
A new Linux rootkit malware called Pumakit has been discovered that uses stealth and advanced privilege escalation techniques to hide its presence on systems.

The malware is a multi-component set that includes a dropper, memory-resident executables, a kernel module rootkit, and a shared object (SO) userland rootkit.

Elastic Security discovered Pumakit in a suspicious binary ('cron') upload on VirusTotal, dated September 4, 2024, and reported having no visibility into who uses it and what it targets.

https://www.bleepingcomputer.com/news/s ... -the-wild/