#SysGoRAT
Attackers Hijack Linux Sudo Prompts to Steal Government Credentials
A campaign targeting government and state-linked infrastructure altered Linux shell profiles to capture sudo passwords while commands continued to work normally. The activity also deployed SysGoRAT, web shells...