Tuesday, 7 January, 2025

Fake regreSSHion Exploit Targets Security Researchers with Malware

A deceptive archive, posing as an exploit for the CVE-2024-6387 "regreSSHion" vulnerability in OpenSSH, is circulating on social platforms. Instead of legitimate code, it contains malware designed to compromise systems of cybersecurity researchers who download it. The malicious payload achieves persistence by modifying system files, ensuring repeated execution and system compromise.