Backdoor in wait4(): Linux kernel vulnerability https://sudonull.com/backdoor-in-wait4-linux-kernel-vulnerability
Analysis of a real backdoor in the Linux kernel from 2003: how an assignment error in wait4() opened root access. Lessons for developers: code review, Git, fuzzing. Study the details of the attack.
Backdoor in WordPress plugins: C2 in Ethereum https://sudonull.com/backdoor-in-wordpress-plugins-c2-in-ethereum
Breakdown of attack on 30+ WP plugins: PHP deserialization, cloaking spam, persistent C2 in smart contract. Cleanup checklist and supply-chain protection. Check your site now.
Malicious advertising of IT utilities: SmokedHam and Qilin attack https://sudonull.com/malicious-advertising-of-it-utilities-smokedham-and-qilin-attack
Learn how hackers distribute the SmokedHam backdoor and Qilin ransomware through malicious ads in search engines. Protection methods and analysis of the UNC2465 campaign.
Malicious npm package steals Polymarket bots keys https://sudonull.com/malicious-npm-package-steals-polymarket-bots-keys
Learn about the attack via the sleek-pretty package in npm: theft of API keys and SSH backdoors for Polymarket developers. How to protect bots and wallets — read the risk analysis and recommendations.