B1txor20 A Linux Backdoor Using DNS Tunneling
B1txor20 can be characterized is using DNS Tunnel to establish C2 channel, support direct connection and relay, while using ZLIB compression, RC4 encryption, BASE64 encodingto protect the traffic of the backdoor Trojan, mainly targets ARM, X64 CPU architecture of the Linux platform. The main features currently supported are shown below. SHELL
Proxy
Execute arbitrary commands
Install Rootkit
Upload sensitive information
Featured Resources
blog
Finding the Right Fit: Vulnerability Assessment vs. Penetration Testing
With more cyber threats than ever before, protecting your organization’s assets and sensitive data has never been more critical. Businesses
blog
Cyber Threats in the Seams
It’s easy for even the most vigilant security teams to overlook a critical reality: no one fully understands all the
CUSTOMERS
Law Enforcement Agency Restores Confidence in Cyber Defenses
This small cybersecurity team is tasked with protecting the organization’s fraud services and all electronic records related to criminal investigations.
Subscribe to Our Blog
Subscribe now to get the latest insights, expert tips and updates on threat exposure validation.
Subscribe