Linux Servers Targeted With AI-Generated Scripts and SysGoRAT Backdoor

Threat actors are targeting government and state-affiliated Linux servers with AI-generated scripts and a backdoor called SysGoRAT, according to the reported campaign, which combines custom-built tools with open-source techniques to gather intelligence and maintain persistent access to targeted networks. The attackers' use of AI-generated scripts marks the campaign's distinguishing method for infiltrating Linux infrastructure.

Linux servers are under attack by sophisticated threat actors wielding AI-generated scripts and the SysGoRAT backdoor to secretly gather intel and maintain a persistent grip on targeted networks. These cyber attackers have set their sights on government and state-affiliated Linux infrastructure, using a potent mix of custom-built tools and open-source tricks to stay one step ahead.