Linux Backdoor PondRAT Detection
This rule detects the Linux_Backdoor_PondRAT malware by identifying specific byte patterns associated with its 'connect_proxy', 'send_payload', and 'execute_shell_command' functions. The rule targets ELF executables.
YARA
