Hackers plant GSocket on Linux servers for persistent access

Multiple threat actors are abusing GSocket, a legitimate open-source remote access tool, to maintain access to compromised Linux servers even after the vulnerabilities exploited for initial access are patched. Microsoft says attackers deploy GSocket to keep encrypted remote access to the servers.