New Linux malware targets the cloud, steals creds, and then vanishes

VoidLink is a newly identified Linux-first, cloud-native malware framework detailed by Check Point Research that targets cloud infrastructure (AWS, GCP, Azure, Alibaba, Tencent) and includes kernel-level rootkits, a custom API similar to Cobalt Strike's Beacon, and 30+ plugins for reconnaissance, credential and secrets theft, container discovery/escape, lateral movement, persistence, and anti-forensics; researchers characterize it as sophisticated and likely developed by professional actors but report no observed real-world infections so far.