The Chinese-linked group Mustang Panda used a kernel-level rootkit to deploy undetectable TONESHELL malware, targeting ...

Abstract: A rootkit is a malicious programme created to load and operate directly from the operating system kernel. Kernel-mode rootkits, also referred to as rootkits that operate in the kernel, have ...

Threat actors are exploiting CVE-2025-20352, a recent Cisco zero-day, to deploy a rootkit on older networking devices. Older Cisco devices unpatched against a recent zero-day vulnerability have been ...

A campaign that exploited a Cisco Simple Network Management Protocol vulnerability to install Linux rootkits on exposed network devices has been observed. The exploit, tracked as CVE-2025-20352 and ...

Fake installers distributed through Chinese-language websites are infecting users with a remote access trojan (RAT) and a rootkit, Netskope reports. Masquerading as legitimate software, such as WPS ...

Forbes contributors publish independent expert analyses and insights. Davey Winder is a veteran cybersecurity writer, hacker and analyst. As if Windows users need any more bad news on the security ...

A new loadable kernel module (LKM) rootkit has been spotted in the wild compromising Linux systems with advanced stealth and privilege escalation features. PUMAKIT, as called by the Elastic Security ...

A new Linux rootkit malware called Pumakit has been discovered that uses stealth and advanced privilege escalation techniques to hide its presence on systems. The malware is a multi-component set that ...

A new malicious campaign is using a legitimate but old and vulnerable Avast Anti-Rootkit driver to evade detection and take control of the target system by disabling security components. The malware ...

Add a description, image, and links to the rootkit-development topic page so that developers can more easily learn about it.

Today, I want to tell you about a tool that should interest you, especially if you’re a bit paranoid (like me). It’s called OpenArk, an open-source anti-rootkit for Windows. But first, what exactly is ...