Security News Chinese Hackers Backdoored Linux Login for nearly a Decade

[Victor M]

Content source

https://thehackernews.com/2026/06/china-linked-hackers-backdoored-linux.html

China-Linked Hackers Backdoored Linux Login Software to Hide for Nearly a Decade

Sygnia says Velvet Ant modified Linux PAM and OpenSSH components to steal credentials and maintain stealthy access since 2016.

thehackernews.com

 

[Captain Awesome]

To stay protected- validate Integrity of PAM and SSH Binaries,Deploy File Integrity Monitoring such as Auditd,Use AIDE or Tripwire.Audit Authentication Logs: Frequently review /var/log/auth.log or /var/log/secure for successful logins that bypass normal multi-factor routines.