
A China-linked group tracked as Velvet Ant backdoored Linux PAM and OpenSSH login components to hide for nearly a decade. The attackers replaced trusted login programs with modified copies that recorded credentials and allowed secret access. Traces date back to 2016, with nine separate versions of the backdoor found.
Tap to vote and see what everyone thinks.
Summary by ByteBrief
AI Credentials Are The Real Attack Surface