Cybersecuritynews New SysUpdate Malware Variant Targets Linux with Encrypted C2 Traffic
Article Content
Browse articles 
A new variant of SysUpdate malware has been identified, specifically targeting Linux systems with advanced command-and-control (C2) encryption. This malware was discovered during a Digital Forensics and Incident Response engagement, where a suspicious ELF64 executable was found in a client's environment. The malware mimics system service behavior and executes basic commands, indicating its operational capabilities.
Ask AI about this cluster
Answers cite the sources they use
Updated 196d ago How this analysis works
Timeline
2026-02-18
New SysUpdate variant malware discovered
2026-02-18
Decryption tool for Linux C2 traffic released
More articles in this cluster (3)
Following this threat?
Track Apt27 and SysUpdate in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Cyberattacks Target Two Oil Tankers Bound for the U.S. In August 2026, two foreign oil tankers, including the VL Prosperity, were reportedly targeted by cyberattacks while navigating the Strait of Gibraltar. The attacks disrupted communications for over 30 hours, raising concerns about the security of maritime operations. The U.S. Coast Guard and FBI boarded the vessels… 
Critical Zero-Day Vulnerability in F5 BIG-IP APM Exploited for Remote Code Execution F5 Networks has reported a critical vulnerability in its BIG-IP Access Policy Manager (APM), tracked as CVE-2026-94127, which is being actively exploited in the wild. The flaw allows unauthenticated attackers to execute remote code on systems configured with both an APM access policy and an OAuth profile. This…