Miasma MYRA fileless RAT: memfd_create/fexecve in-memory execution or systemd-userdbd masquerade
Detects indicators of the MYRA Linux RAT, including fileless execution via memory-based techniques (memfd_create/fexecve), process masquerading as systemd-userdbd, and persistence mechanisms leveraging LD_PRELOAD and malicious cron jobs.
Microsoft Sentinel (KQL)
