Baget Exploit 2021 !!better!!

Process creation chain: unpriv_user → pkexec → /bin/sh -c "arbitrary command"

In early 2021, the cybersecurity world was rocked by one of the most devastating server-side exploit chains in recent history. While the technical community focused on the now-infamous vulnerabilities (CVE-2021-26855, CVE-2021-27065, et al.), a specific, aggressive malware family capitalized on these flaws with ruthless efficiency: Baget (also tracked as ProxyShellon or simply the "Baget backdoor"). baget exploit 2021

In February 2023, the U.S. and UK officially sanctioned Baget and six other members of the gang. Process creation chain: unpriv_user → pkexec → /bin/sh