Netskope Threat Labs

Shikitega

ATP Sandbox Adv. HeuristicsAV

Shikitega is a stealthy Linux malware that researchers documented in 2022, delivered through encoded shellcode that downloads additional stages, including a cryptocurrency miner. It exploits local vulnerabilities to gain root privileges and maintains persistence on servers and IoT devices.

First seen
September 2022
Last seen
September 2026
Alert Name
Linux.Trojan.Shikitega
Trojan.Linux.Shikitega.A
Trojan.Linux.Shikitega.B
Trojan.Linux.Shikitega.C
Trojan.Linux.Shikitega.D
Trojan.Linux.Shikitega.E
Trojan.Linux.Shikitega.F
Trojan.Linux.Shikitega.G
Trojan.Linux.Shikitega.H
Trojan.Linux.Shikitega.I