Dossier
Rehub Russian cybercrime forum
Coverage of Rehub Russian cybercrime forum in the Nexus archive.
- New Linux PamDOORa Backdoor Uses PAM Modules to Steal SSH Credentials
A new Linux backdoor called PamDOORa is being sold on a Russian cybercrime forum for $1,600. It uses PAM modules to steal SSH credentials and enable persistent access. The backdoor is advertised by a threat actor known as darkworm.