persistence

Live1

1. live
   GSocket Threat Actors Abuse GSocket for Persistent Access on Compromised Linux Servers

   Breaches & attacks · Exploited · since 12 Nov 2026

   Multiple threat actors are actively abusing the legitimate GSocket tool to maintain persistent access on compromised Linux servers. The technique allows attackers to retain control even after underlying initial access vulnerabilities are patched.

   Do:Audit Linux servers for unauthorized GSocket installations and inspect network connections.

Earlier0

Nothing closed yet.