Tele-Rat infiltrates Linux servers with Telegram command control, stealing data

August 5, 2024
1 min read

TLDR:

  • The Telegram-controlled TgRat trojan is targeting Linux servers to steal data.
  • The trojan uses the messaging app Telegram to communicate with attackers and exfiltrate data.

TgRat, a Telegram-controlled trojan, has been discovered attacking Linux servers in an attempt to steal data. The trojan uses the popular messaging app Telegram as a vector to target Linux servers. Attackers can issue commands to the trojan through a private Telegram group, allowing them to download files, take screenshots, run commands, and upload data as attachments from compromised systems. The trojan uses a unique method to communicate with its control server, a Telegram bot, making it difficult for victims to detect the infection. Researchers recommend installing antivirus software on local network nodes to prevent infection from TgRat.

Latest from Blog

Top 20 Linux Admin Tools for 2024

TLDR: Top Linux Admin Tools in 2024 Key points: Linux admin tools streamline system configurations, performance monitoring, and security management. Popular Linux admin tools include Webmin, Puppet, Zabbix, Nagios, and Ansible. Summary

Bogus job tempts aerospace, energy workers

TLDR: A North Korean cyberespionage group is posing as job recruiters to target employees in aerospace and energy sectors. Mandiant reports that the group uses fake job descriptions stored in malicious archives

Cyber insurance changes shape of security for good and bad

TLDR: Key Points: Cyber-insurance landscape is shifting to encourage greater cyber resiliency Rising costs of cyberattacks are prompting insurers to re-examine underwriting How Cyber-Insurance Shifts Affect the Security Landscape The article discusses