Dossier
PamDOORa
Coverage of PamDOORa in the Nexus archive.
- New Linux PamDOORa Backdoor Uses PAM Modules to Steal SSH Credentials
A new Linux backdoor called PamDOORa is being sold on a Russian cybercrime forum for $1,600. It uses PAM modules to steal SSH credentials and enable persistent access. The backdoor is advertised by a threat actor known as darkworm.