B1txor20 A Linux Backdoor Using DNS Tunneling
B1txor20 can be characterized is using DNS Tunnel to establish C2 channel, support direct connection and relay, while using ZLIB compression, RC4 encryption, BASE64 encodingto protect the traffic of the backdoor Trojan, mainly targets ARM, X64 CPU architecture of the Linux platform.
The main features currently supported are shown below.
SHELL
Proxy
Execute arbitrary commands
Install Rootkit
Upload sensitive information
Featured Resources
View More Resources
blog
Project Glasswing: What Anthropic's AI Cyber Evaluations Mean for Security Validation
Project Glasswing shows frontier AI can find and exploit software flaws at scale, making continuous validation vital.
blog
MITRE ATLAS AI Security Framework: Tactics and Techniques Explained
AI models, copilots and agents are now part of the enterprise attack surface. By connecting them to corporate data, repositories,
blog
Operationalizing Agentic Cyber Defense Engineering for SecOps
Security operations teams spend too much of each day gathering context, configuring assessments, correlating evidence and coordinating follow-up actions across