Ted Backdoor Writing C2 Commands to Named Pipe Under /tmp

Arnold Chan@slaz

•updated Sep 7, 2026•0•0•0

Detects the creation or modification of specific files within the /tmp directory, specifically those matching naming patterns associated with 'jasper-log' files or temporary pipe files. These patterns are often associated with temporary storage or data staging activities during post-exploitation or malware execution.