[Intel]: https://sysdig.com/blog/chaos-malware-persistence-evasion-techniques/

[timb-machine]

Area

Malware reports

Parent threat

Persistence, Defense Evasion

Finding

https://sysdig.com/blog/chaos-malware-persistence-evasion-techniques/

Industry reference

uses:Go
attack:T1554:Compromise Client Software Binary
attack:T1546.004:Unix Shell Configuration Modification
attack:T1053.003:Cron
attack:T1543.002:Systemd Service
attack:T1037:Boot or Logon Initialization Scripts

Malware reference

Chaos
/malware/binaries/Chaos

Actor reference

No response

Component

Linux

Scenario

No response