Security News > 2024 > February > GTPDOOR Linux Malware Targets Telecoms, Exploiting GPRS Roaming Networks

2024-02-29 11:33
Threat hunters have discovered a new Linux malware called GTPDOOR that’s designed to be deployed in telecom networks that are adjacent to GPRS roaming exchanges (GRX) The malware is novel in the fact that it leverages the GPRS Tunnelling Protocol (GTP) for command-and-control (C2) communications. GPRS roaming allows subscribers to access their GPRS services while they are
News URL
https://thehackernews.com/2024/02/gtpdoor-linux-malware-targets-telecoms.html
Related news
- Chinese Hackers Target Linux Systems Using SNOWLIGHT Malware and VShell Tool (source)
- Experts Uncover New XorDDoS Controller, Infrastructure as Malware Expands to Docker, Linux, IoT (source)
- SK Telecom warns customer USIM data exposed in malware attack (source)
- Watch out for any Linux malware sneakily evading syscall-watching antivirus (source)
- Malicious Go Modules Deliver Disk-Wiping Linux Malware in Advanced Supply Chain Attack (source)
- Linux wiper malware hidden in malicious Go modules on GitHub (source)
- Go-Based Malware Deploys XMRig Miner on Linux Hosts via Redis Configuration Abuse (source)
- SK Telecom says malware breach lasted 3 years, impacted 27 million numbers (source)