Description
SaltWater is a backdoor module for the Barracuda SMTP daemon that can upload and download files, execute commands, and proxy and tunnel traffic. It implements its hooks through a third-party function hooking library, and its design descends from the open source cd00r backdoor concept.
Stats
- First seen
- June 2023
- Last seen
- October 2026
Alert name variants
| Alert Name |
|---|
| Gen:Variant.Linux.SaltWater.1 |
| Gen:Variant.Linux.SaltWater.2 |
| Gen:Variant.Trojan.Linux.SaltWater.1 |
| Gen:Variant.Trojan.Linux.SaltWater.2 |
| Linux.Trojan.SaltWater |