discovered 03 Aug 2026
Rebellion
→ View on GitHubRebellion is a Linux kernel rootkit malware designed for x86 and x86_64 architectures, offering features such as self-hiding capabilities, folder and file concealment, TCP/UDP port hiding, privilege escalation from low-privilege users to root, and a backdoor mechanism accessed via ICMP packets. Currently in beta, it seeks collaboration for development to address existing bugs and architecture compatibility issues. Notable functionalities include the ability to manipulate visibility within the system using the `kill` command and the curation of specific configurations through a dedicated `config.h` file.