Hacker News Reader

Direct link to the blog post with all details https://www.intezer.com/blog/research/new-linux-threat-symbi...

>Analysis of a New, Nearly-Impossible-to-Detect Linux Threat

Yeah, that's a straight up lie. LD_PRELOAD kits are by definition very easy to detect.

...unless that LD_PRELOAD rootkit has had a large amount of elbow grease put into patching all of the usual detection methods. Which appears to be the case here.

What exactly do you mean? The usual detection methods are essentially unpatchable while using this technique.

Symbiote Deep-Dive: Analysis of a New, Nearly-Impossible-to-Detect Linux Threat

And disclosed in a blog post, with Nearly-Impossible-to-Read text.

Do you mean text font/colour or the content itself?

Not sure about GP, but the Font / Color combo is darn near impossible for me to read.

Reply on news.ycombinator.com