Skip to content
Threat Feed
Subscribe

Actor

Criminal Groups

1 brief RSS
high threat

Suspicious Process Execution from Linux Shared Memory (/dev/shm)

Attackers are abusing the Linux shared memory directory, `/dev/shm`, for fileless malware staging and execution to evade disk-based detection mechanisms, posing a high risk for persistent access and system compromise.

Various APTs +1 stealth execution linux memory-abuse
1r 1t