"SprySOCKS", a new Linux backdoor, has been observed in Earth Lusca's latest activity, involving the targeting of government agencies in various countries.
A financially motivated threat actor uses known vulnerabilities, ordinary TTPs, and off-the-shelf tools to exploit the unprepared, highlighting the fact that many organizations still don't focus on the security basics.