MYRA RAT Masquerading as systemd-userdbd on Linux

Ibrahim Saud@tektrix

•updated Jun 30, 2026•0•0•0

Detects processes that masquerade as the legitimate 'systemd-userdbd' system service by spoofing their process name. This behavior is commonly associated with malware, such as the MYRA RAT, which uses prctl to alter its process display name to evade detection.