[Intel]: https://www.microsoft.com/en-us/security/blog/2023/06/22/iot-devices-and-linux-based-systems-targeted-by-openssh-trojan-campaign/

[timb-machine]

Area

Malware reports

Parent threat

Persistence, Defense Evasion, Credential Access, Discovery, Impact

Finding

https://www.microsoft.com/en-us/security/blog/2023/06/22/iot-devices-and-linux-based-systems-targeted-by-openssh-trojan-campaign/

Industry reference

attack:T1110:Brute Force
uses:SHC
attack:T1057:Process Discovery
attack::T1003.008:/etc/passwd and /etc/shadow
attack:T1098.004:SSH Authorized Keys
attack:T1556:Modify Authentication Process

Malware reference

Reptile
#171
Diamorphine
#217
ZiggyStarTux
#701

Actor reference

No response

Component

Linux, IOT

Scenario

Consumer