Cybersecurity researchers have disclosed details of a malicious Go module that's designed to harvest passwords, create persistent access via SSH, and deliver a Linux backdoor named Rekoobe.
The Go module, github[.]com/xinfeisoft/crypto, impersonates the legitimate "golang.org/x/crypto" codebase, but injects malicious code that's responsible for exfiltrating secrets entered via terminal password
_811205.png)
_e196d8.png)
_32b3d9.png)
_1c53fe.png)
Recommended Comments
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.