RotaJakiro
S1078 · Linux
RotaJakiro is a 64-bit Linux backdoor used by APT32. First seen in 2018, it uses a plugin architecture to extend capabilities. RotaJakiro can determine it's permission level and execute according to access type (root or user).
ATT&CK S1078
Sigma rules0
YARA rules0
Live IOCs0