Hackers plant GSocket on Linux servers for persistent access

Multiple threat actors are abusing GSocket, a legitimate open-source remote access tool, to maintain access to Linux servers even after patching the vulnerabilities exploited to gain initial access. […]

Source: BleepingComputer · 2026-11-12