---
id: 6282
title: "Rekoobe Backdoor Discovered in Open Directory, Possibly Targeting TradingView Users"
source_domain: hunt.io
source_url: "https://hunt.io/blog/rekoobe-backdoor-discovered-in-open-directory-possibly-targeting-tradingview-users"
published_at: "2024-10-24T00:00:00Z"
tags: ["backdoor", "ssh-keys", "open-directories", "rekoobe", "apt31", "tradingview"]
phying_url: "https://phying.com/item/6282"
lang: en
---

# Rekoobe Backdoor Discovered in Open Directory, Possibly Targeting TradingView Users

## Summary

Hunt.io unearths APT31-linked Rekoobe backdoor samples in an open directory, pivoting via shared SSH keys to TradingView-lookalike domains that suggest the trading community is in the crosshairs.

## Intelligence Metadata

- **Sources:** hunt.io
- **Published:** 2024-10-24T00:00:00Z
- **Original:** https://hunt.io/blog/rekoobe-backdoor-discovered-in-open-directory-possibly-targeting-tradingview-users
- **Phying News:** https://phying.com/item/6282