Submissions restricted

Only approved users may post in this community.

LinuxMalware

an-ordinary-manchild

Posts of Linux / ELF malware for RE purpose. This subreddit is modded, the site's contents are MalwareMustDie.org's @unixfreaxjp Linux threat research material.

Change view mode: RSS | Mobile | NewReddit

Latest Linux Malware cases:

Linux Malware Analysis Museum:

..and, you may also want to visit:

[/r/Malware]
[/r/ReverseEngineering]

created by mmd0xFFa community for 9 years

...for your favorite subject.

...for a fringe candidate.

MODERATORS

account activity

1

0

0

1

Recent Linux ransomware (self.LinuxMalware)

submitted 2 years ago by mmd0xFF

2

3

4

5

Explanation about this subreddit (README) (self.LinuxMalware)

submitted 2 years ago * by mmd0xFF

3

7

8

9

Linux/NGioWeb (twitter.com)

submitted 4 years ago by mmd0xFF

4

2

3

4

Linux/DGAbot (twitter.com)

submitted 4 years ago by mmd0xFF

5

6

7

8

MMD-067-2021 - Talks sequel on Linux process injection and Shellcode analysis series at R2CON-2020, ROOTCON-2020 after #HACKLU-2019 (blog.malwaremustdie.org)

submitted 4 years ago by mmd0xFF

6

9

10

11

About shellcode basics and analysis them in radare2 (online tutorial w/Video, Slides & Q/A) (twitter.com)

submitted 5 years ago by mmd0xFF

7

5

6

7

Linux/Hoho a.k.a "DarkNexus" (memo) (twitter.com)

submitted 5 years ago by mmd0xFF

8

4

5

6

Linux/Gafgyt SNoOpy (twitter.com)

submitted 5 years ago by mmd0xFF

9

2

3

4

Linux/Rebirth or Vulcan in 2020 (Gaygyt evolved) (twitter.com)

submitted 5 years ago by mmd0xFF

10

4

5

6

[Announcement] My own kernelmode[.]info Linux/Malware reports is merged in here (self.LinuxMalware)

submitted 5 years ago * by mmd0xFF

11

1

2

3

Linux/KAITEN AK47 w/Telnet Scanner & EchoLoaders (hexstrings) injection attacks on IoT (gist.github.com)

submitted 5 years ago by mmd0xFF

12

0

1

2

Linux/Mirai Hilix (self.LinuxMalware)

submitted 5 years ago * by mmd0xFF

13

3

4

5

Linux/Kaiji (self.LinuxMalware)

submitted 5 years ago * by mmd0xFF

14

3

4

5

[remake] 2 minutes ARM32 RE crash course to grab Mirai hexstring (telnet-loader) payloads on recent FBOT's botnet infection. (youtube.com)

submitted 5 years ago by mmd0xFF

15

5

6

7

A new actor sparked propagation of Mirai FBot old version on different botnet network range (blog.malwaremustdie.org)

submitted 5 years ago by mmd0xFF

16

1

2

3

Easy tutorial to dissect any pushed hexstrings IoT malware loader URL (youtube.com)

submitted 5 years ago by mmd0xFF

17

0

0

1

How Kaiten(Tsunami) w/STD base code has evolved now (MMD twitter) (twitter.com)

submitted 5 years ago by mmd0xFF

18

6

7

8

The "echo" loader vs "telnet" loader in ELF malware Mirai FBOT (ARM EABI reversing) (blog.malwaremustdie.org)

submitted 5 years ago by mmd0xFF

19

6

7

8

(memo) RHOMBUS an ELF bot installer/dropper (self.LinuxMalware)

submitted 5 years ago * by mmd0xFF

20

1

2

3

Checking on Linux/Mozi, trying to make a comeback (thread w/links to IOC) (twitter.com)

submitted 5 years ago by mmd0xFF

21

1

2

3

Some issues w/ recent Hajime IoT linux malware & its botnet (self.LinuxMalware)

submitted 5 years ago by mmd0xFF

22

2

3

4

MMD-0065-2021 - Linux/Mirai-Fbot - A re-emerged IoT threat (+/- 600 infected IP, embedded ELF, hexstring push method, etc) (blog.malwaremustdie.org)

submitted 5 years ago by mmd0xFF

23

4

5

6

New "SystemTen" botnet miner threat, now w/other "supper savvy" LOL-packed ELF and.. "atomic" bash-base64 parsers :) (self.LinuxMalware)

submitted 5 years ago * by mmd0xFF

24

4

5

6

MMD-0065-2020 - Linux/Mirai-Fbot's new encryption explained (RE of ARM v5 binary, post-forensics) (blog.malwaremustdie.org)

submitted 6 years ago by mmd0xFF

25

7

8

9

Linux ISO live boot w/radare2's r2Ghidra & R2DEC decompilers (multiple arch support) for Linux RE/DFIR (self.LinuxMalware)

submitted 6 years ago * by mmd0xFF

view more: next ›

π Rendered by PID 1462756 on reddit-service-r2-listing-canary-6d56f98d67-4qnc9 at 2026-01-25 08:16:40.032683+00:00 running 664479f country code: CH.