Hidden Linux Binary Threats for Intruders and Malware

Hidden Linux Binary Threats for Intruders and Malware
Publication Date : January 2026
 

Linux attackers and malware often hide their binary payloads. In this video we'll discuss what this threat is, why it is done, and how to find processes running with hidden binaries using command line forensics.

In this video we cover:

  • Hidden Linux binaries and why they are often malicious.
  • Investigating hidden binaries.
  • Locating Linux processes running with a suspicious hidden binary.

 

Sandfly is able to find this and many other types of Linux attacks without deploying any endpoint agents. Get your free license today or contact us for more information.

Transcript available on the YouTube video above.

 


Share this post:

 
Linux Process Running with Hidden Binary Name Attack

Linux Process Running with Hidden Binary Name Attack

A Linux process running as a hidden binary name is often malware. Learn about this Linux threat and how to detect it here.

Read More
SSH Excessive Keys Risk - Do You Have Too Many SSH Keys? Probably.

SSH Excessive Keys Risk - Do You Have Too Many SSH Keys? Probably.

Having too many SSH keys on Linux presents a credential theft and backdoor risk. Learn more about this threat and how to find it.

Read More
Linux Process Running from /dev/shm RAM Disk Attack

Linux Process Running from /dev/shm RAM Disk Attack

Linux malware will often run from the /dev/shm RAM disk to evade detection and destroy itself to hide evidence. Learn more in this video about how to...

Read More