Hackers abuse GSocket for persistent access to Linux servers

Multiple threat actors are abusing the legitimate open-source tool GSocket to maintain persistent access to Linux systems. This technique allows attackers to retain control over compromised servers even after the initial vulnerabilities have been patched. Administrators should audit networks for unauthorized instances of this utility to detect hidden backdoors.