Sneaky Linux Malware Evades Detection for Two Years, Experts Reveal
A stealthy Linux malware called “sedexp” has evaded detection for over two years by exploiting udev rules, giving attackers remote access while remaining hidden.

Hot Take:
If you thought finding Waldo was tough, try finding sedexp! This elusive Linux malware has been playing hide-and-seek with antivirus software for over two years, and it’s winning!
Key Points:
- sedexp, a new Linux malware, has been evading detection for more than two years.
- It uses udev rules, a device manager in the Linux kernel, to remain hidden.
- The malware disguises its process name as ‘kdevtmpfs’ to avoid detection.
- It is suspected to have been used for hiding credit card skimmers.
- Stroz Friedberg discovered sedexp and detailed its operation.
Membership Required
You must be a member to access this content.