Skip to main content
Kernel Thread Impostor operation cover
COMING SOONBeginner

Kernel Thread Impostor

An internet-exposed Linux node falls to an SSH password brute force, and within seconds the Outlaw (Dota3) toolkit drops a hidden cryptominer disguised as a kernel thread. Work the auth logs, process records, and perimeter traffic to reconstruct the break-in, the persistence, and the mining.

25m
6 tasks
25 points
Free

Launches in 2 days

Sep 22, 2026

Tuesday, September 22, 2026 at 9:00 AM

Create your free account

Be ready the moment it drops, free.

Training Tools

SIEMFirewall

What you'll investigate

6 objectives unlock when this operation goes live.

1Find the breached account
2Identify the brute-force source
3Locate where the toolkit was staged
4Unmask the cryptominer process
5Trace the mining destination
6Classify the objective

Be first when it launches

Create your free account now. The moment this operation goes live on Sep 22, 2026, you can jump straight in — and you'll have the rest of the catalog to train on meanwhile.

Get Started Free