Redigo Backdoor Malware Targets Redis Servers
The Redigo backdoor is written in the Go programming language and targets Redis servers vulnerable to a Lua scripting engine defect.
The flaw is classified under CVE-2022-0543 and allows the remote attacker to execute arbitrary commands.
The threat actor behind the attack attempted to hide communication by sending data from the malware to command-and-control servers over Redis port 6379.
Featured Resources
View More Resources
Demo
From Vulnerability to Validation
See how Cymulate connects vulnerabilities to real attack scenarios to validate what’s actually exploitable.
Demo
Threat Validation Demo
See how Cymulate helps security teams quickly validate protection against new threats and get answers in minutes
Demo
From Control Validation to Exposure Validation
See how security teams move from control validation to true exposure validation using real-world attack scenarios