🧰 PAM

The items that name it 3

• Password Cracking: Stealing SSH Credentials with PAM
  writeupas tools2026-10-06It is written here as PAM (Pluggable Authentication Modules).

  System authentication framework patched to intercept and log plaintext SSH credentials via pam_exec.so

• Orca Security: ITDR for the Cloud
  articleas tools2026-07-03It is written here as PAM (Privileged Access Management).

  Preventive control that protects privileged accounts

• Fantastic clear-text passwords and where to collect them (Part 1 - Linux)
  articleas affected products2026-06-21It is written here as PAM (Pluggable Authentication Modules).

  Framework for system-wide authentication in services like sshd, su, sudo; targeted via backdoored/custom .so modules and pam_tty_audit.so for credential/keystroke capture.