Cyber Security· Important
Threat actors using GSocket for stealthy persistence on Linux
Attackers are leveraging the open-source tool GSocket to maintain persistent, encrypted command-and-control access on compromised Linux servers. By utilizing a shared public relay network rather than attacker-owned infrastructure, this method bypasses traditional IP-based blocking and remains active even after initial vulnerabilities are patched.