SECURITYQUIET
1 hour ago
Hackers plant GSocket on Linux servers for persistent access
SIGNALSMONITORSECURITY
What's happening
SignalsMonitor is following this as a security story. BleepingComputer is the outlet attached so far. The first report grouped here was at 12 Nov 2026, 09:38 UTC. The headline in use is “Hackers plant GSocket on Linux servers for persistent access”. This note is SignalsMonitor's own briefing, not the publisher's article.
What we know
Multiple threat actors are abusing GSocket, a legitimate open-source remote access tool, to maintain access to Linux servers even after patching the vulnerabilities exploited to gain initial access. [...
BleepingComputerRead at BleepingComputer
Story timeline
Reports grouped into this story, earliest first. Exact repeats from the same outlet are collapsed.
- First reported by BleepingComputer
Hackers plant GSocket on Linux servers for persistent access
Reported by 1 outlet
- BleepingComputer
- BleepingComputerHackers plant GSocket on Linux servers for persistent access