The Art of Domain Deception: New Tactic to Deceive Users
released on 2024-02-29 @ 06:41:14 PM
A recent Linux variant of the Bifrost remote access Trojan uses a deceptive domain, download.vmfare.com, mimicking a legitimate VMware domain to bypass security measures. Bifrost allows attackers to gather sensitive information and there has been a spike in Linux variants in recent months.