Just saw this "Quasar Linux (QLNX) – A Silent Foothold in the Supply Chain: Inside a Full-Feature...

Summary

Quasar Linux (QLNX) has been identified as a full-featured Linux remote access trojan with advanced capabilities including rootkit functionality, PAM backdoor mechanisms, and credential harvesting tools. The malware appears designed to establish a persistent supply chain foothold, suggesting potential targeting of critical infrastructure or enterprise environments. The discovery highlights the growing sophistication of Linux-targeted malware threats.

Indicators of Compromise

• malware — Quasar Linux (QLNX)

Entities