zeek-spicy-facefish

FacefishRootkit Questo analizzatore Zeek+Spicy rileva la C2 del rootkit Linux Facefish come descritto in: https://blog.netlab.360.com/sshstealerfacefishen/ https://blogs.juniper.net/en-us/threat-research/linux-servers-hijacked-to-implant-ssh-backdoor...