⤷ Title: Curly COMrades APT Bypasses EDR by Hiding Linux Backdoor Inside Covert Hyper-V VM
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 06 Nov 2025 00:17:01 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #Curly COMrades #CurlyShell #cyber_espionage #EDR Bypass #Hyper_V #Linux VM #Russian APT #virtualization
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 06 Nov 2025 00:17:01 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #Curly COMrades #CurlyShell #cyber_espionage #EDR Bypass #Hyper_V #Linux VM #Russian APT #virtualization
Daily CyberSecurity
Curly COMrades APT Bypasses EDR by Hiding Linux Backdoor Inside Covert Hyper-V VM
Bitdefender exposed Curly COMrades (Russian APT) using Hyper-V to run a hidden Alpine Linux VM. The VM hosts the CurlyShell backdoor, effectively bypassing host-based EDR for espionage.