Magnet Goblin hackers use 1-day flaws to drop custom Linux malware

Magnet Goblin is a financially motivated hacking group that quickly exploits publicly disclosed 1-day vulnerabilities in products like Ivanti Connect Secure, Apache ActiveMQ, Qlik Sense, ConnectWise ScreenConnect, and Magento to infect servers with custom Windows and Linux malware (NerbianRAT, MiniNerbian) and a JavaScript stealer; the report describes malware behaviors, C2 actions, and emphasizes rapid patching and standard mitigations to reduce impact.