A novel multi-platform backdoor dubbed SysJoker has been successfully evading security solutions since mid-2021. “In the Linux and macOS versions, it masquerades as a system update. In the Windows version, it masquerades as Intel drivers. The update names are somewhat generic: In the macOS version, the file is relocated and named ‘updateMacOs’ and in the Linux version it is named ‘updateSystem’,” Avigayil Mechtinger, security researcher at Intezer, has shared with Help Net Security. SysJoker: A … More
The post A new multi-platform backdoor is leveraged by an advanced threat actor appeared first on Help Net Security.