OrBit is a malware family tracked across 1 threat cluster and 2 intelligence report mentions on ThreatCluster. First observed May 15, 2026; most recent activity May 15, 2026.
The OrBit rootkit has been targeting Linux systems for several years, specifically harvesting SSH and sudo credentials. Initially thought to be a custom threat, it has been identified as a modified version of a publicly…