TF-MAL-elf.redshell
📛 Threat Title
Malware family: redshell
Description
ThreatFox malware family `elf.redshell`. Printable name: redshell.
Indicators of Compromise (0)
No indicators of compromise on this threat.
References (1)
- ThreatFox: IOCs for this family ThreatFox Malwares
Remediations (10)
-
web:arxiv.org
The application of Machine Learning techniques in code generation is now a common practice for most developers. Tools such as ChatGPT from OpenAI leverage the natural language processing capabilities of Large Language Models to generate machine code from natural language descriptions. In the cybersecurity field, red teams can also take advantage of generative models to build malicious code ...
-
web:arxiv.org
In this work, we propose RedShell , an AI-based malicious PowerShell gen-erator designed to provide more automation to Pentesting activities targeting Microsoft Windows.
-
web:cyberpress.org
The findings come from TrendAI Research, which analyzed the packages and reverse-engineered the embedded implant, dubbed RedShell Linux. RedC2 AI-Powered Linux Malware Uses npm Packages
-
web:radar.offseq.com
Detailed information about New SynkLoader malware pushed in Microsoft Teams phishing campaign. Get real-time updates, technical details, and mitigation strategi
-
web:socradar.io
What Is CVE-2025-49844? CVE-2025-49844, dubbed RediShell, is a use-after-free vulnerability inside Redis's Lua scripting engine. By sending a maliciously crafted Lua script, an attacker who already has authenticated access can manipulate Redis's garbage collector to execute arbitrary native code on the host machine.
-
web:undercodenews.com
The embedded implant, identified by TrendAI Research as RedShell Linux, transforms seemingly harmless JavaScript utilities into potential gateways for persistent remote access. What makes this campaign especially troubling is not simply the malware itself.
-
web:www.cisa.gov
It highlights technical approaches to uncovering malicious activity and includes mitigation steps according to best practices. The purpose of this report is to enhance incident response among partners and network administrators along with serving as a playbook for incident investigation.
-
web:www.hivepro.com
Red | Vulnerability Report Redis Under Siege: RediShell Flaw Opens Door to Remote Code Execution Summary A critical vulnerability in Redis, tracked as CVE-2025-49844 and dubbed RediShell, exposes all Redis software releases with Lua scripting to remote code execution (RCE). The flaw, discovered on May 16, 2025, originates from a 13-year-old use-after-free bug that allows an authenticated ...
-
web:www.malware.museum
This archive is an almost-complete reconstruction of the legendary Mega Security (also known as Kobayashi), a premier 90s-era "Trojan Database" where malware authors once showcased their work. After a decade offline, the site was brought back in August 2024 by its original creator, MasterRat, who authorized me to host this modernized, searchable version of the collection. While the original ...
-
web:www.sysdig.com
CVE-2025-49844 (RediShell) is a critical Redis remote code execution vulnerability (CVSS 10.0) affecting all versions with Lua scripting. Discovered by Wiz and patched on October 3 2025, it allows authenticated users to gain host access. Learn how it works, who's affected, and how to detect and mitigate it.
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.