← Incidents
INCIDENT 199IntrusionLOW / UNDER REVIEWSourced
UAT-10147 deploys SPECTRE: A cross-platform implant with Linux rootkit and BYOVD capabilities
The newly identified SPECTRE implant represents an evolution in commodity intrusion tooling, integrating cross-platform C2 operations, process injection, credential theft, anti-analysis protections, and kernel-level endpoint detection and response (EDR) bypass functionality.
Last evidence update
20 AUG 2026 · 10:00 UTC
Source count
1
Status
reported
Observation history
How this record has evolved as evidence accumulated.
21 AUG · 05:03 UTC
Initial report
Evidence