New Linux PamDOORa Backdoor Uses PAM Modules to Steal SSH Credentials

A new Linux backdoor called PamDOORa is being sold on a Russian cybercrime forum for $1,600. It uses PAM modules to steal SSH credentials and enable persistent access. The backdoor is advertised by a threat actor known as darkworm.