Skip to content

Reptile

Named by 2 kept items in this workspace.

Search every workspace for Reptile. It matches the name as written, so it can find other things that share it.

The items that name it 2

  • Reptile's Custom Kernel-Module Launcher
    writeup2024-11-10

    Linux kernel-mode rootkit; version 2.0 replaced insmod-based loading with a custom launcher, later updated by UNC3886 with a daemonize function.

  • Today I Learned - kernel.modules_disabled
    writeup2024-07-10

    Open-source Linux rootkit implemented as a loadable kernel module (LKM) that provides backdoor access to a system; cited as used by attackers in Mandiant's blog post

All threat actors in this workspace.