[Intel]: https://cybersecurity.att.com/blogs/labs-research/shikitega-new-stealthy-malware-targeting-linux

[timb-machine]

Area

Malware reports

Parent threat

Execution, Persistence, Defense Evasion

Finding

https://cybersecurity.att.com/blogs/labs-research/shikitega-new-stealthy-malware-targeting-linux

Industry reference

attack:T1036.005:Match Legitimate Name or Location
attack:T1059:Command and Scripting Interpreter
attack:T1569:System Service
attack:T1569.002:Service Execution
attack:T1543:Create or Modify System Process
attack:T1027:Obfuscated Files or Information
uses:Non-persistentStorage
attack:T1057:Process Discovery
attack:T1070.004:File Deletion
attack:T1546.004:Unix Shell
exploit:CVE-2021-3493

Malware reference

Shikitega
/malware/binaries/Shikitega

Actor reference

No response

Component

Linux

Scenario

No response