Cybersecurity researchers shed light on a new sophisticated backdoor targeting Linux endpoints and servers. Dubbed “RedXOR” by Intezer, the malware is believed to be the work of Chinese nation-state actors. It’s compiled with a legacy GCC compiler on an old release of Red Hat Enterprise Linux. The malware takes the form of an unstripped 64-bit ELF file (“po1kitd-update-k”), complete with a typosquatted name, before installing itself on the machine.
Source: https://thehackernews.com/2021/03/researchers-unveil-new-linux-malware.html