Skip to content
Threat Feed
Subscribe

Tag

Gsocket

1 brief RSS
high advisory

Threat actors weaponizing GSocket for persistent C2 on Linux servers

Threat actors are increasingly deploying the legitimate GSocket tool on compromised Linux servers to maintain persistent, encrypted remote access that survives the remediation of initial RCE vulnerabilities.

PHP +2 c2 linux gsocket persistence persistence-mechanism
4t