General Information
Velvet Ant Linux Login Backdoors: Check PAM and OpenSSH
Sygnia says Velvet Ant replaced Linux PAM and OpenSSH components in a long-running intrusion. Hosting admins should verify login-stack integrity before rotating credentials.
June 12, 2026
No Comments
