As cited
Copy frozen at (site build).
research
Hooked on Linux: Rootkit Taxonomy, Hooking Techniques and Tradecraft
A security research series examines how Linux rootkits have evolved across different architectural layers, from userland shared object manipulation through kernel modules to contemporary approaches leveraging extended Berkeley Packet Filter (eBPF) and io_uring. The analysis documents the progression of hooking techniques that attackers have employed to maintain persistence and stealth on compromised systems.
Why it matters: Practitioners defending Linux infrastructure need to understand the full spectrum of rootkit attack vectors, from legacy to emerging methods, to design detection and prevention strategies across kernel and userland boundaries.
- Source published
- First seen by Cybersecurity Tracker