Skip to content
MalwareWiki

Malware

Symbiote

A malware capable of capturing credentials and enabling backdoor access, implemented as a userland rootkit.

Symbiote is a Linux malware family.

Background

This is a userland rootkit that can steal credentials and grant backdoor access. To conceal its network traffic it relies on three hooking and hijacking techniques: 1) fopen/fopen64, 2) eBPF, and 3) a collection of libpcap functions.

Source: Malpedia (Fraunhofer FKIE).