NewsThe Hacker News2026-10-06 18:24 UTC

Linux Backdoors Impersonate Email Security Tools to Evade Detection in Korea and Taiwan

Linux backdoors targeting telecom and network appliances in South Korea and Taiwan have been disguising their traffic as email services and seemingly legitimate processes to blend in and evade detection. Threat actors are known to name their malicious software after a legitimate operating system component or a process as a defense evasion measure. By borrowing the name of a real binary, it may

Other advisories

CVE-2026-87817none
GitPython: Repository content can impersonate the git directory, leading to arbitrary code execution
CVE-2026-87817high
GitPython: Repository content can impersonate the git directory, leading to arbitrary code execution
CVE-2026-61682none
kcp front-proxy does not strip inbound X-Remote-* identity headers, allowing any authenticated client to inject groups/warrants and impersonate system:masters in any workspace in github.com/kcp-dev/kcp
CVE-2026-61682none
kcp front-proxy does not strip inbound X-Remote-* identity headers, allowing any authenticated client to inject groups/warrants and impersonate system:masters in any workspace
CVE-2026-61682critical
kcp front-proxy does not strip inbound X-Remote-* identity headers, allowing any authenticated client to inject groups/warrants and impersonate system:masters in any workspace
osv:CVE-2026-61682none
kcp front-proxy does not strip inbound X-Remote-* identity headers, allowing any authenticated client to inject groups/warrants and impersonate system:masters in any workspace
CVE-2026-90955none
Affected versions of MISP’s interactive CLI shell do not reliably preserve the identity of the impersonated MISP user across audit logging.
osv:GHSA-2pxq-5vcg-rq29none
Duplicate Advisory: Repository content can impersonate the git directory, leading to arbitrary code execution

Other news entries

Newstheregister-security2026-10-10
Two characters open up a world of typosquatting opportunities in Chromium browsers
Newsthehackernews2026-10-06
Fake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codes
Newsdarkreading2026-10-05
Chinese Hackers Impersonate US Officials for AI Cyber Espionage
Newsthehackernews2026-10-04
China-Aligned TA419 Targets U.S. AI Policy Experts With Microsoft AitM Phishing
Newssecurityweek2026-09-29
Hackers Use ChatGPT Custom GPTs in ClickFix Attacks
Newstheregister-security2026-09-25
Crooks use fake desktop apps to fool HR staff into giving them remote access
Newssecurityweek2026-09-24
Astrana Health Data Breach Impacts Private, Confidential Information
Newsbleepingcomputer2026-09-23
New RemControl Android banking malware targets users in Europe and Canada

Source: https://thehackernews.com/2026/10/linux-backdoors-impersonate-email.html

More on Impersonate