libprocesshider

Reported Context (2)

- **Linux, IoT, and proxy abuse featured strongly.** A rootkit matching the opensource `libprocesshider` tool posted 201,808 detections while the IPRoyal `Pawns.app` residential proxy client posted 184,522. Two Linux WatchGuard H1 2026 Report Finds More Novel Malware Despite Falling Network Detections
TeamTNT – This group used libprocesshider in different campaigns. How Linux Rootkits Abuse LD_PRELOAD to Hide Malicious Activity

CVE (8)

Malware (14)

Threat Actors (4)

MITRE ATT&CK (16)

Vendors (2)

Products (11)

Tools (3)

Countries (10)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.