A new sample of the ToneShell backdoor, typically seen in Chinese cyberespionage campaigns, has been delivered through a kernel-mode loader in attacks against government organizations.

Mustang Panda deployed TONESHELL via a signed kernel-mode rootkit, targeting Asian government networks and evading security ...

The China-linked Mustang Panda APT has been using a kernel-mode rootkit in attacks leading to ToneShell backdoor deployments.

Microsoft’s big focus for Windows is AI integration. Meanwhile, Valve has been not-so-quietly pilfering the entire PC gaming ...

Sony BMG, the record company part of the multinational corporation that makes laptops, TVs, movies and many other things, is in trouble this week thanks to a copy protection scheme it has used on a ...

To defend against the new attacks, the researchers advise memory forensics as the number one way of spotting ToneShell ...

The Chinese-linked group Mustang Panda used a kernel-level rootkit to deploy undetectable TONESHELL malware, targeting ...

An Iranian cyber-security firm said it discovered a first-of-its-kind rootkit that hides inside the firmware of HP iLO devices and which has been used in real-world attacks to wipe servers of Iranian ...

Hi team, thanks for maintaining rkhunter. I’ve encountered a situation that inspired this small enhancement suggestion. I hope it’s helpful, and I’m happy to clarify or revise if needed. Thanks for ...