Blog

Security Research

The Definitive Guide to Linux Process Injection

Ori David is a Security Researcher at Akamai. His research is focused on offensive security, malware analysis, and threat hunting.

Awareness of the different injection techniques on Linux seems to be relatively low — especially when compared with Windows.

Introduction

Process injection techniques are an important part of an attacker's toolset. They can enable threat actors to run malicious code inside a legitimate process to avoid detection, or to place hooks in remote processes to modify their behavior. 

\r\n The topic of process injection on Windows machines has been extensively researched, and there is relatively good awareness of it. For Linux machines, this is not exactly the case.…