systemd

aliases

Last seen:Mar 17, 2026

Intelligence Profile

General purpose backdoor

Threat Analysis

systemd is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.

Intelligence Reports Mentioning systemd

Ubuntu CVE-2026-3888 Bug Lets Attackers Gain Root via systemd Cleanup Timing Exploit

The Hacker News· Mar 18, 2026

External References

→https://jsac.jpcert.or.jp/archive/2021/pdf/JSAC2021_301_shui-leon_en.pdf

→https://securelist.com/windealer-dealing-on-the-side/105946/

→https://vms.drweb.com/virus/?_is=1&i=15299312&lng=en

Quick Facts

TypeAPT / Threat Group

Aliases4

Also Known As

Demstyosx.systemdReverseWindowsystemd

External Intelligence

Malpedia: osx.systemd

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search

Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.

← All Threat Actors·Geopolitics Map·Search systemd