ChamelDoH: New Linux Backdoor Utilizing DNS-over-HTTPS Tunneling for Covert CnC
A new development in the ChamelGang threat actor's capabilities is the observation of the threat actor deploying a previously unreported implant to backdoor Linux systems.
The malware is a C++-based tool for interacting via DNS-over-HTTPS (DoH) tunnelling and is known as ChamelDoH by Stairwell.
In September 2021, the Russian cybersecurity company Positive Technologies revealed ChamelGang for the first time, revealing its attacks on the production of gasoline, electricity, and aviation in Russia, the United States, India, Nepal, Taiwan, and Japan read more ChamelDoH New Linux Backdoor Utilizing DNS-over-HTTPS Tunneling for Covert CnC.
Stay one step ahead of cyber threats with ReconBee.com. Explore our comprehensive coverage of recent cyber attacks, cybersecurity awareness, and the...