TGTGInsighttelegram intelligenceLIVE / telegram public index
TGINSIGHT POST
Post #8962
@thehackernews
The Hacker News
Post content
Post content
π¨ QLNX, a previously undocumented #Linux RAT, is targeting developers and DevOps systems to steal npm, PyPI, AWS, Kubernetes, Docker, and CI/CD credentials. The malware uses fileless execution, PAM backdoors, eBPF rootkits, and 58 remote commands to maintain covert access and hijack software supply chains. Learn more about QLNX here: https://thehackernews.com/2026/05/quasar-linux-rat-steals-developer.html