Analysis of Nood RAT Used in Attacks Against Linux (Gh0st RAT’s Variant)

AhnLab SEcurity intelligence Center (ASEC) recently discovered that Nood RAT is being used in malware attacks. Nood RAT is a variant of Gh0st RAT that works in Linux. Although the number of Gh0st RAT for Linux is fewer compared to Gh0st RAT for Windows, the cases of Gh0st RAT for Linux are continuously being collected. Nood RAT is categorized as a variant of Gh0st RAT based on the code’s similarity with previous codes from Gh0st RAT [1]. A builder …

ahnlab analysis asec attacks cases center gh0st rat intelligence linux malware malware analysis malware attacks rat security security intelligence windows