Iron Tiger APT Group Updates SysUpdate Malware to Target Linux Platforms

Red | Vulnerability Report

The Iron Tiger aka APT27 group updated their custom malware, SysUpdate, to target Linux platforms and evade security solutions. They specifically targeted a vulnerability in a Wazuh signed executable, using a complex loading process and new C&C communication through DNS TXT requests.

Reduce real exposure. Not just vulnerability volume.