ConnectBack
Aliases: Getshell
- Malware type
- backdoor, rat
- Family
- Malware family
- Last IoC activity
- 2026-07-21 05:25:05
- Profile updated
- 2026-07-07 14:23:46
Context
ConnectBack malware is a type of malicious software designed to establish unauthorized connections from an infected system to a remote server. Once a victim's device is compromised, ConnectBack creates a covert channel for communication, allowing the attacker to remotely control and gather sensitive information from the compromised system.
Detection coverage
- 2 YARA rules
Detection rules
- RUSSIANPANDA_Getshellplugin (yara-rule)
- DITEKSHEN_MALWARE_Linux_Getshell (yara-rule)
Reports & references
- malpedia.caad.fkie.fraunhofer.de — Elf.Connectback (report)
- labs.sucuri.net — Pl Backdoor Connectback 001 (report)