Linux Kernel Module Rootkit – Syscall Table Hijacking | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		Linux Kernel Module Rootkit – Syscall Table Hijacking (medium.com/bugbountywriteup)
		2 points by DyslexicAtheist on Feb 7, 2020 \| hide \| past \| favorite \| 1 comment

bediger4000 on Feb 7, 2020 [–]

This is interesting and everything, but...

Are there Linux rootkits in use in the wild?

About 2001, I encountered a user-level Solaris root kit. But I don't why would you bother with a LKM rootkit? If you can load a module, you already have root access. Just do your stuff.

Consider applying for YC's Summer 2026 batch! Applications are open till May 4
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact