#SimplexTea

Malware/Tool

2023-04-20 • Linux malware strengthens links between Lazarus and the 3CX supply‑chain attack

SimplexTea is a Linux backdoor used in Operation DreamJob. Delivered by OdicLoader from OpenDrive, it establishes persistence through the Bash profile and supports process execution, file operations, system discovery, encrypted command-and-control, and data exfiltration.

Tagged Reports

« Back