Unveiling VoidLink – A Stealthy, Cloud-Native Linux Malware Framework

Key takeaways VoidLink – a Cloud-First Malware Framework In December 2025, Check Point Research identified a small cluster of previously unseen Linux malware samples that appear to originate from a Chinese-affiliated development environment. Many of the binaries included debug symbols and other development artifacts, suggesting we were looking at in-progress builds rather than a finished, […]
The post Unveiling VoidLink – A Stealthy, Cloud-Native Linux Malware Framework appeared first on Check Point Research.

---

.blog-post-wrap h1.h3{color:white; font-size:1.4rem} .wp-block-image figcaption {text-align:center;} .wp-block-heading{color:#FFF;} strong { font-weight: bold; color:white;} .wp-block-table thead{border-bottom:4px solid #656597} p, ul li, ol li, .text, .text a {color:#ddd} .blog-post-wrapper.single-blog-wrapper .text p, .blog-post-wrapper.single-blog-wrapper .text li, .blog-post-wrapper.single-blog-wrapper .text p a {color:#ddd} .wp-block-table td, .wp-block-table th { border:2px solid #656597;} .blog-post-wrapper.single-blog-wrapper .text p a, .text a { color: #748ad8; } code { background: #ad2963; word-wrap: break-word; padding: 0rem 0.2rem 0rem; border-radius: 0.2rem; }

---

[Original source](https://research.checkpoint.com/2026/voidlink-the-cloud-native-malware-framework/)