SYMBOLCOMMON_NAMEaka. SYNONYMS
elf.auto_color (Back to overview)

Auto-Color

According to Unit 42, Auto-Color was discovered in November 2024 named based on the file name of the initial payload. It hides its C2 communication similarly to Symbiote, including the use of proprietary encryption algorithms.

References
2026-08-30 ⋅ Medium 0xzyadelzyat ⋅ Zyad Elzyat
Reverse Engineering the Auto-Color Linux Backdoor
Auto-Color
2025-04-01 ⋅ ZW01f ⋅ Mohamed Ezat
Auto-color - Linux backdoor
Auto-Color

There is no Yara-Signature yet.