Hackers plant GSocket on Linux servers for persistent access
BLEEPINGCOMPUTER — Multiple threat actors are abusing GSocket, a legitimate open-source remote access tool, to maintain access to Linux servers even after patching the vulnerabilities exploited to gain initial access. [...]
- CODE
- RT-3CA008
- PUBLISHER
- BleepingComputer
- TOPIC
- Cybersecurity
- PUBLISHED
- 12 November 2026 · 09:38 UTC
- FIRST SEEN
- 12 November 2026 · 09:45 UTC
- ORIGINAL
- https://www.bleepingcomputer.com/news/security/hackers-plant-gsocket-on-linux-servers-for-persistent-access/
- SHA-256
- 63218461222bcaca0def876b0b72d966108f64fda9d0c3464041b0555519d60b
The fingerprint is the SHA-256 of the original link, the headline and the publication time joined by “|”. Anyone can recompute it to confirm the headline and link were not changed here.
Headline and short excerpt from BleepingComputer, taken from its public news feed. The full story and its photos belong to BleepingComputer — read it at the original. RICHTVX NEWS is an independent aggregator and is not affiliated with BleepingComputer. Corrections: legal@richtvx.news.
More from BLEEPINGCOMPUTER
Microsoft: Recent Windows updates cause SQL Server performance issuesRT-00C8C0 · CYBERSECURITY
Microsoft confirms Windows security updates installation issuesRT-A3551B · CYBERSECURITY
Baker Tilly notifies clients of data breach at third-party providerRT-7F241C · CYBERSECURITY
Active ScreenConnect attacks breach MSPs, impact dozens of organizationsRT-CCDD6C · CYBERSECURITY
eMudhra revokes 8 more CA certificates after private key mishapRT-A4A343 · CYBERSECURITY
Notion says Fireworks breach exposed customer AI chat transcriptsRT-4555DE · CYBERSECURITY
