Linux Immutable Malware Process Binary Attack

Linux Immutable Malware Process Binary Attack
Sandfly Blog

Linux Immutable Malware Process Binary Attack

06 January 2025

Videos
 

Processes running with an immutable binary are nearly always malware on Linux. Learn what this attack is, how to automatically detect it, and command line forensics you can use to investigate suspicious processes using this attack tactic.

 

Sandfly is able to find this and many other types of Linux attacks without deploying any endpoint agents. Get your free license today or contact us for more information.

Full transcript available here.


Immutable File Attack Persistence on Linux

Immutable files on Linux can be abused by malware and hackers to remain on a system. Learn more about this threat in this video.

Read More
Hidden Linux Binary Threats for Intruders and Malware

Hidden Linux Binary Threats for Intruders and Malware

Hidden binaries on Linux are often malware or intruder activity. Learn more about this threat and how to detect it here.

Read More
Deleted Process Binary Attack on Linux

Deleted Process Binary Attack on Linux

Linux malware often deletes its binary from the disk to evade detection and analysis. Learn how to detect and respond to this attack in this video.

Read More