Also bear in mind, that many rootkits hide processes and connections from command line tools like ps, top, lsof, netstat, ss, etc... In this particular malware

Also bear in mind, that many rootkits hide processes and connections from command line tools like ps, top, lsof, netstat, ss, etc... In this particular malware campaign, the malware contained a rootkit which hid precisely some of its activity: https://github.com/gustavo-iniguez-goya/decloaker/discussions/4 https://github.com/gustavo-iniguez-goya/decloaker/discussion...