UAT-10147 deploys SPECTRE: A cross-platform implant with Linux rootkit and BYOVD capabilities

Cisco Talos Intelligence Version 1 original current

Imported from official source

The newly identified SPECTRE implant represents an evolution in commodity intrusion tooling, integrating cross-platform C2 operations, process injection, credential theft, anti-analysis protections, and kernel-level endpoint detection and response (EDR) bypass functionality. 

This version

Version
1 of 1
Recorded
September 18, 2026 11:34
Change
Initial
Content hash
3adaffd0df0b49e4b8c019f5a50fc553
All versions
Revision history

Officially records where a publication came from, not whether it is true. Imported records are reproduced from an organization's own official source.