New SysUpdate Malware Variant Targets Linux with Encrypted C2 Traffic

A new variant of SysUpdate malware has been identified, specifically targeting Linux systems with advanced command-and-control (C2) encryption. This malware was discovered during a Digital Forensics and Incident Response engagement, where a suspicious ELF64 executable was found in a client's environment. The malware mimics system service behavior and executes basic commands, indicating its operational capabilities.