Tag
Adversaries can establish persistence on Linux systems by modifying XDG Autostart entries to execute malicious scripts or binaries that initiate unauthorized network connections upon user login.