From gbhackers.com
Security researchers at Intezer have recently discovered malware that has been continuously targeting Linux endpoints and servers.
Apart from this, the malware that has been detected by the security analysts of Intezer has been dubbed as “RedXOR”, and they affirmed that it’s a backdoor that is masquerading as a Polkit daemon.
In this malware, there have been some similarities that have been found between the malware, those beforehand connected with the Winnti Umbrella (or Axiom) threat group like PWNLNX, Groundhog, and XOR.DDOS.