77% Of Rootkits Are Used For Espionage PurposesHelp Net Security·Nov 5, 00:00 UTC · Nov 5, 2021Malware55
Reptile Rootkit employed in attacks against Linux systems in South KoreaSecurity Affairs·Aug 5, 20:19 UTC · Aug 5, 2023MalwareCVE-2022-4132860
China-linked APT Deep Panda employs new Fire Chili Windows rootkitSecurity Affairs·Apr 3, 15:44 UTC · Apr 3, 2022Malware55
Hacking industrial processes with and undetectable PLC RootkitSecurity Affairs·Sep 18, 16:46 UTC · Sep 18, 2016Malware55
Kaspersky Security Bulletin 2007: Malware evolution in 2007Kaspersky Securelist·Feb 26, 10:05 UTC · Feb 26, 2008Malware55
Reptile Rootkit: Advanced Linux Malware Targeting South Korean SystemsThe Hacker News·Aug 7, 09:56 UTC · Aug 7, 2023Malware in the wild60
Hacking Team Spyware uses a UEFI BIOS RootkitSecurity Affairs·Oct 5, 20:22 UTC · Oct 5, 2020Malware55
Over 400 Arch Linux AUR Packages Hijacked to Deploy Infostealer and eBPF RootkitThe Hacker News·Jun 12, 19:35 UTC · Jun 12, 2026Malware55
ThreatsDay Bulletin: Linux Rootkits, Router 0-Day, AI Intrusions, Scam Kits and 25 New StoriesThe Hacker News·May 24, 08:14 UTC · May 24, 2026MalwareCVE-2026-4579360
Hackers Deploy Linux Rootkits via Cisco SNMP Flaw in 'Zero Disco' AttacksThe Hacker News·Oct 17, 04:35 UTC · Oct 17, 2025MalwareCVE-2025-20352CVE-2017-388160
OBSCURE#BAT Malware Uses Fake CAPTCHA Pages to Deploy Rootkit r77 and Evade DetectionThe Hacker News·Mar 15, 00:00 UTC · Mar 15, 2025Malware55
North Korean Hackers Deploy FudModule Rootkit via Chrome ZeroThe Hacker News·Oct 23, 04:44 UTC · Oct 23, 2024Malware in the wildCVE-2024-7971CVE-2024-4947CVE-2024-5274+3 CVEs60
SonicWall adds rootkit removal capabilities to the SMA 100 seriesHelp Net Security·Oct 9, 13:10 UTC · Oct 9, 2025Malware in the wildCVE-2024-38475CVE-2025-4059960
Caketap, a new Unix rootkit used to siphon ATM banking dataSecurity Affairs·Mar 18, 15:45 UTC · Mar 18, 2022Malware55
Hackers Target Bank Networks with new Rootkit to Steal Money from ATM MachinesThe Hacker News·Jul 31, 10:04 UTC · Jul 31, 2025Malware55
Purple Fox version includes Rootkit and implements wormable propagationSecurity Affairs·Mar 29, 06:53 UTC · Mar 29, 2021Malware55
CHIPSEC, Intel Security releases detection tool also for CIA EFI rootkitsSecurity Affairs·Mar 13, 07:04 UTC · Mar 13, 2017Malware55
⚡ Weekly Recap: Linux Rootkit, macOS Crypto Stealer, WebSocket Skimmers and MoreThe Hacker News·May 11, 12:36 UTC · May 11, 2026Malware in the wildCVE-2026-6973CVE-2026-030060
ThreatsDay Bulletin: Pre-Auth Chains, Android Rootkits, CloudTrail Evasion & 10 More StoriesThe Hacker News·Apr 2, 15:07 UTC · Apr 2, 2026MalwareCVE-2026-2699CVE-2026-270160
SonicWall SMA devices persistently infected with stealthy OVERSTEP backdoor and rootkitHelp Net Security·Aug 5, 15:29 UTC · Aug 5, 2025MalwareCVE-2021-20035CVE-2021-20039CVE-2024-38475+1 CVEs60
SonicWall fixed critical flaw in SMA 100 devices exploited in Overstep malware attacksSecurity Affairs·Jul 24, 13:01 UTC · Jul 24, 2025MalwareCVE-2025-40599CVE-2024-3847560
Windows 0-day was exploited by North Korea to install advanced rootkitArs Technica · Security·Aug 19, 23:37 UTC · Aug 19, 2024MalwareCVE-2024-3819360
A New Bug in Microsoft Windows Could Let Hackers Easily Install a RootkitThe Hacker News·Sep 24, 04:54 UTC · Sep 24, 2021Malware55
ThreatsDay Bulletin: Spyware Alerts, Mirai Strikes, Docker Leaks, ValleyRAT Rootkit — and 20 More StoriesThe Hacker News·Dec 18, 12:15 UTC · Dec 18, 2025MalwareCVE-2024-3721CVE-2025-5518260
RESURGE Malware Exploits Ivanti Flaw with Rootkit and Web Shell FeaturesThe Hacker News·Mar 31, 09:11 UTC · Mar 31, 2025MalwareCVE-2025-028260
Chinese Hackers Breach Juniper Networks Routers With Custom Backdoors and RootkitsThe Hacker News·Mar 15, 00:00 UTC · Mar 15, 2025MalwareCVE-2025-2159060
Daxin: 13-Year-Old China-Linked Malware Found Still Active on Manufacturer's NetworkSecurity Affairs·Jul 18, 14:01 UTC · Jul 18, 2026Malware55
Russians' stealthy 'LoJax' malware can infect on the firmware levelCyberScoop·Sep 28, 13:48 UTC · Sep 28, 2018Malware in the wild60
SSHStalker Botnet Uses IRC C2 to Control Linux Systems via Legacy Kernel ExploitsThe Hacker News·Feb 11, 09:58 UTC · Feb 11, 2026MalwareCVE-2009-2692CVE-2009-2698CVE-2010-3849+6 CVEs60
New LABRAT Campaign Exploits GitLab Flaw for Cryptojacking and Proxyjacking ActivitiesThe Hacker News·Aug 19, 06:07 UTC · Aug 19, 2023Malware in the wildCVE-2021-22205CVE-2021-403460
Abcbot — A New Evolving Wormable Botnet Malware Targeting LinuxThe Hacker News·Nov 12, 15:15 UTC · Nov 12, 2021Malware55
First Android Malware Found Exploiting Dirty COW Linux Flaw to Gain Root PrivilegesThe Hacker News·Sep 26, 13:57 UTC · Sep 26, 2017Malware in the wildCVE-2016-5195CVE-2015-180560
New Advanced Linux VoidLink Malware Targets Cloud and container EnvironmentsThe Hacker News·Jan 19, 08:54 UTC · Jan 19, 2026Malware55
New Perfctl Malware Targets Linux Servers for Cryptocurrency Mining and ProxyjackingThe Hacker News·Oct 5, 04:35 UTC · Oct 5, 2024MalwareCVE-2021-404360