CloudSnooper

Cloud Snooper is a malware targeting both Linux and Windows servers, including those hosted on Amazon Web Services (AWS). It employs a rootkit to establish a backdoor, enabling attackers to bypass firewall restrictions and communicate with compromised systems via covert channels. The malware inspects incoming HTTP and HTTPS traffic, identifying specially crafted packets that signal commands from the attackers. This technique allows unauthorized access and data exfiltration while evading traditional security measures.