DinodasRAT malware targets Linux servers in espionage campaign

Kaspersky and other vendors have identified a Linux variant of the DinodasRAT (XDealer) targeting Red Hat and Ubuntu servers in an espionage campaign; the backdoor persists via SystemV/SystemD, uses TEA-encrypted TCP/UDP C2, provides full remote control and data exfiltration, and has been linked to an APT activity cluster (Earth Krahang/Operation Jacana) with victims across several countries since 2022/Oct 2023.