Hackers plant GSocket on Linux servers for persistent access
Multiple threat actors are abusing GSocket, a legitimate open-source remote access tool, to maintain access to Linux servers even after patching the vulnerabilities exploited to gain initial access.
Covered by 2 publishers within an hour of the first report.
Summary from BleepingComputer.
Reporting2
BleepingComputer Hackers plant GSocket on Linux servers for persistent access · Bill Toulas
Cyber Security News Microsoft Warns Hackers Are Using GSocket Backdoors to Keep Linux Servers Compromised After Patching · Tushar Subhra Dutta