[Intel]: https://github.com/QuokkaLight/rkduck

[timb-machine]

Area

Malware PoCs

Parent threat

Persistence, Defense Evasion, Command and Control

Finding

https://github.com/QuokkaLight/rkduck

Industry reference

attack:T1014:Rootkit
attack:T1547.006:Kernel Modules and Extensions
attack:T1056.001:Keylogging
attack:T1564.001:Hidden Files and Directories
attack:T1021.004:SSH
attack:T1095:Non-Application Layer Protocol
attack:T1048:Exfiltration Over Alternative Protocol
attack:T1573:Encrypted Channel

Malware reference

No response

Actor reference

No response

Component

Linux

Scenario

No response