Malware Development for Ethical Hackers - Second Edition

7

Linux Malware Persistence Mechanisms

This chapter covers several ways used by Linux malware to establish persistence on a compromised system and to maintain malicious access after a reboot or power cycle of the system. The injection and in-memory execution approaches presented in the preceding chapter enable instant control but are inherently volatile. For malware to attain long-term residency, it must transition from being a transient guest in memory to a permanent resident of the operating system's lifetime. You will see the implementation of persistence at different levels of privilege, step by step. You will learn how to disguise malicious triggers by taking advantage of normal system procedures, administrative tools, and initialization ...