New SysUpdate Variant Targets Linux Systems with Encrypted C2 Traffic
VPN Central [Unofficial]
February 23, 2026
A new variant of SysUpdate malware has been found attacking Linux systems. Security researchers at LevelBlue discovered it during a real-world incident response. They also built a decryption tool to reveal its hidden command-and-control communications. This threat uses strong encryption to hide its activities from defenders. The malware runs as a disguised system service on […]
The post New SysUpdate Variant Targets Linux Systems with Encrypted C2 Traffic appeared first on VPN Central.
Discussion in the ATmosphere