chainguard-dev / malcontent

#supply #chain #attack #detection
Apache License 2.0
446 stars 31 forks source link

Improve detection of Golang/Linux backdoors #567

Closed tstromberg closed 2 weeks ago

tstromberg commented 2 weeks ago

Recent tests demonstrated that we could be a lot better about go-lang based backdoor detection. I tuned the rules by reviewing samples on GitHub & MalwareBazaar, but nothing that diverged significantly from what we already had.