RICHTVX NEWS logoRICHTVXNEWS
Hackers plant GSocket on Linux servers for persistent access
◉ BLEEPINGCOMPUTER · CYBERSECURITY · RT-3CA008

Hackers plant GSocket on Linux servers for persistent access

⌖ BLEEPINGCOMPUTER⏱ ✓ SOURCE · bleepingcomputer.com/news/securit…SHA-256 63218461·222BCACA

BLEEPINGCOMPUTER — Multiple threat actors are abusing GSocket, a legitimate open-source remote access tool, to maintain access to Linux servers even after patching the vulnerabilities exploited to gain initial access. [...]

CODE
RT-3CA008
PUBLISHER
BleepingComputer
TOPIC
Cybersecurity
PUBLISHED
12 November 2026 · 09:38 UTC
FIRST SEEN
12 November 2026 · 09:45 UTC
ORIGINAL
https://www.bleepingcomputer.com/news/security/hackers-plant-gsocket-on-linux-servers-for-persistent-access/
SHA-256
63218461222bcaca0def876b0b72d966108f64fda9d0c3464041b0555519d60b

The fingerprint is the SHA-256 of the original link, the headline and the publication time joined by “|”. Anyone can recompute it to confirm the headline and link were not changed here.

Headline and short excerpt from BleepingComputer, taken from its public news feed. The full story and its photos belong to BleepingComputer — read it at the original. RICHTVX NEWS is an independent aggregator and is not affiliated with BleepingComputer. Corrections: legal@richtvx.news.

More from BLEEPINGCOMPUTER

← Back to the news · The archive

GUARDED BY CERBERUSSCANNED BY WIREKNOX GUARD★ ADD AS A PREFERRED SOURCE ON GOOGLE