Sudo Password Validation Loop (T1110)

Ibrahim Saud@tektrix

•updated Jun 20, 2026•0•0•7

Identifies the Python backdoor natively invoking sudo -k -S pwd to silently validate phished credentials against the OS.