---
id: 21
title: "[CVE-2024-3094] xz-utils backdoor: how to get started"
cve: CVE-2024-3094
source_domain: kali.org
source_url: "https://www.kali.org/blog/xz-backdoor-getting-started/"
published_at: "2024-04-01T00:00:00Z"
tags: ["supply-chain", "incident-response", "malware-analysis", "kali-linux", "backdoor", "xz-utils", "cve-2024-3094"]
phying_url: "https://phying.com/item/21"
lang: en
---

# [CVE-2024-3094] xz-utils backdoor: how to get started

## Summary

A beginner walkthrough for reproducing the xz-utils/liblzma backdoor (CVE-2024-3094): set up a Kali VM, install backdoored liblzma 5.6.1 from Debian snapshots, and verify the compromise.

## Intelligence Metadata

- **Sources:** kali.org
- **CVE:** CVE-2024-3094
- **Published:** 2024-04-01T00:00:00Z
- **Original:** https://www.kali.org/blog/xz-backdoor-getting-started/
- **Phying News:** https://phying.com/item/21