Skip to content
MalwareWiki

Malware

RotaJakiro

RotaJakiro is a stealthy Linux backdoor which remained undetected between 2018 and 2021.

RotaJakiro is a Linux malware family operated by APT32.

Background

RotaJakiro is a covert backdoor for Linux that evaded detection from 2018 through 2021. To protect both its embedded resources and its C2 traffic, it relies on rotating encryption that layers AES, XOR, and ROTATE ciphers together with ZLIB compression.

Source: Malpedia (Fraunhofer FKIE).