Linux Backdoor Targeting iKuai Routers

On July 1, 2026, MalwareHunterTeam shared an ELF uploaded to VirusTotal from Japan with 0 detection. After a quick code inspection, it was evident that the ELF was a backdoor targeting specific Linux-based devices. File name: libjson_script.so.0 SHA2: 4e6276cc400b3b9e9616d04474b64a8fa0c35375b9673ab41a92a6d5bce72d8d First uploaded to VirusTotal from Japan on 2026-06-08 The ELF impers...