Hackers Backdoor pam_unix.so and OpenSSH Binaries to Bypass Authentication and Steal Credentials

Imagine an attacker living inside a highly secure, isolated network for nearly a decade. Sygnia’s incident response team recently uncovered exactly that during a prolonged investigation dubbed “Operation Highland.” The China-nexus threat actor known as Velvet Ant has maintained an undetected presence inside a critical infrastructure environment since at least 2016. Velvet Ant is a […]

The post Hackers Backdoor pam_unix.so and OpenSSH Binaries to Bypass Authentication and Steal Credentials appeared first on Cyber Security News.