A vulnerability in the Linux kernel, dubbed “Dirty Pipe”, allows unprivileged users to overwrite data in read-only files. This can...
By Chris Bassey
Rootkits (MITRE T1014) are malicious software with the functionality to hide files, network connections, processes, and other system artifacts. They may reside in user mode,...
Read more
Using Wazuh rootcheck to detect Reptile rootkit
By Chris Bassey
Rootkits (MITRE T1014) are malicious software with the functionality to hide files, network connections, processes, and other system artifacts. They...
Read more
BPFDoor is backdoor malware associated with the Chinese APT – Red Menshen. It is a highly evasive malware that targets Linux and Solaris-based systems. It...
Read more
Using Wazuh to detect BPFDoor malware
BPFDoor is backdoor malware associated with the Chinese APT – Red Menshen. It is a highly evasive malware that targets...
Read more
WhisperGate is a destructive file-wiper malware that is being used in a campaign targeting Ukrainian organizations. The malware targets Windows devices, corrupts the Master Boot...
Read more
Detecting and removing WhisperGate malware
WhisperGate is a destructive file-wiper malware that is being used in a campaign targeting Ukrainian organizations. The malware targets Windows...
Read moreProcess injection is a defense evasion technique used by adversaries to execute malicious code within legitimate processes. When malware runs its code in the context...
Read more
Detecting process injection attacks with Wazuh
Process injection is a defense evasion technique used by adversaries to execute malicious code within legitimate processes. When malware runs...
Read moreKeep up to date with
our digest of articles
Wazuh will not sell, trade, lease, or rent your personal data to third parties. By subscribing, I agree to the use of my personal data in accordance with Wazuh Privacy Policy.