Linux Version of DinodasRAT Spotted in Cyber Attacks Across Several Countries

DinodasRAT (also called XDealer or Linodas) is a C++ backdoor with a newly documented Linux variant used in targeted espionage against government and regional targets (China, Taiwan, Turkey, Uzbekistan, and previously Guyana). Analyses from Kaspersky and Check Point detail persistent SystemV/SystemD startup, TEA-encrypted C2 over TCP/UDP, file/process/shell command capabilities, modular functionality (including a filter module that proxies/controls binary output), evasion of debugging/monitoring tools, and attribution to China-nexus actors such as LuoYu and clusters like Earth Krahang.