
APT41 Turns Linux Cloud Servers Into Credential Theft Targets With New Winnti Backdoor
A new Linux-focused cyberattack campaign linked to APT41, also known as Winnti, is targeting cloud environments with a stealthy backdoor designed to steal sensitive credentials. Security researchers discovered a previously undetected ELF malware sample actively operating across major cloud platforms, including AWS, Google Cloud, Microsoft Azure, and Alibaba Cloud. The malware stands out because it […] The post APT41 Turns Linux Cloud Servers Into Credential Theft Targets With New Winnti Backdoor appeared first on Cyber Security News.