Cling Botnet Persistence - Hidden .cling Malware Embedded into Linux Boot Process
The detection identifies Linux persistence activity associated with the Cling botnet, where a hidden executable (.cling) is copied to privileged locations, made executable, and registered to run automatically through system startup mechanisms.
Microsoft Sentinel (KQL)
