Thehackernews

VoidLink Malware Targets Linux Cloud Environments with Advanced Techniques

First seen 13 Jan 2026, 15:48 UTC • Cybersecuritynews

+11 •30.6

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

A new malware framework named VoidLink has emerged, specifically targeting Linux systems in cloud environments. It utilizes advanced evasion techniques and self-deletion capabilities, and is written in the Zig programming language, marking a significant evolution in cloud infrastructure attacks. Major cloud platforms such as AWS, GCP, Azure, and Alibaba are among those affected.

Ask AI about this cluster

Answers cite the sources they use

How this analysis works

Attack Flow

20 entities, 39 inferred relationships (STIX 2.1).

Technique (7)

Malware
Privilege Escalation
Anti-Forensic Evasion
Lateral Movement
Persistence
Post-Exploitation
Reconnaissance

Organization (4)

Alibaba
AWS
Azure
Microsoft Azure

Malware (2)

VoidLink
Cobalt Strike

Affected Platform (5)

GCP
Kubernetes
Linux
Tencent
Windows

Tool (2)

Docker
VoidStream

Relationships

VoidLink targets Alibaba
VoidLink targets AWS
VoidLink targets Azure
VoidLink targets Microsoft Azure
Cobalt Strike targets Alibaba
Cobalt Strike targets AWS
Cobalt Strike targets Azure
Cobalt Strike targets Microsoft Azure
Malware targets GCP
Malware targets Kubernetes
Malware targets Linux
Malware targets Tencent
Privilege Escalation targets GCP
Privilege Escalation targets Kubernetes
Privilege Escalation targets Linux
Privilege Escalation targets Tencent
Anti-Forensic Evasion targets GCP
Anti-Forensic Evasion targets Kubernetes
Anti-Forensic Evasion targets Linux
Anti-Forensic Evasion targets Tencent
Lateral Movement targets GCP
Lateral Movement targets Kubernetes
Lateral Movement targets Linux
Lateral Movement targets Tencent
Persistence targets GCP
Persistence targets Kubernetes
Persistence targets Linux
Persistence targets Tencent
Post-Exploitation targets GCP
Post-Exploitation targets Kubernetes
Post-Exploitation targets Linux
Post-Exploitation targets Tencent
Reconnaissance targets GCP
Reconnaissance targets Kubernetes
Reconnaissance targets Linux
Reconnaissance targets Tencent
VoidLink related to Windows
VoidLink related to Docker
VoidLink related to VoidStream

Continue Reading

Critical Linux Vulnerability 'Copy Fail' Grants Root Access Across Major Distros VoidLink Malware Framework Signals AI-Driven Cyber Threat Evolution Emergence of VoidLink Rootkit Threatens Linux Systems with Advanced Evasion Techniques VoidLink: AI-Generated Linux Malware Framework Emerges VoidLink Malware Targets Cloud and Enterprise Systems VoidLink: New Cloud-First Malware Framework Discovered

VoidLink Malware Targets Linux Cloud Environments with Advanced Techniques

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading