Research · March 27, 2026
WordPress Supply Chain Attacks: BuddyBoss, Gravity Forms, and the Trust Problem
Three premium plugin supply chains compromised in 12 months. Attackers are targeting vendor update infrastructure, and we publish 10 new LMD signatures to catch current and future backdoors.
365.7k
36.35M
2,104
Deployed across government, defense, education & enterprise networks
git clone https://github.com/rfxn/linux-malware-detect.git && cd linux-malware-detect && ./install.shRecent GitHub Activity
View allPushed to linux-malware-detect: pushed commits
Pushed to advanced-policy-firewall: pushed commits
Pushed to brute-force-detection: pushed commits
Pushed to pkg_lib: pushed commits
Pushed to depot: pushed commits
Created branch main in depot
Featured Projects
View allLinux Malware Detect
A high-performance malware scanner for Linux designed for the multi-core era. v2.0.1 introduces a foundational engine leap that delivers up to 10x faster performance than traditional scanners via hash-first short-circuiting and batch-parallel processing.
Advanced Policy Firewall
An iptables(netfilter) based firewall system for Linux servers. Provides three-fold filtering with static rules, stateful connection tracking, and sanity-based packet inspection.
Brute Force Detection
A modular shell script for parsing application logs and detecting authentication failures. Uses regex rules and integrates with APF, Shorewall, or raw iptables for blocking.
Quick Start
Get up and running in minutes. All tools install from source with a single command.
$ git clone https://github.com/rfxn/linux-malware-detect.git && cd linux-malware-detect && ./install.sh$ git clone https://github.com/rfxn/advanced-policy-firewall.git && cd advanced-policy-firewall && ./install.sh$ git clone https://github.com/rfxn/brute-force-detection.git && cd brute-force-detection && ./install.shBuilt for Real-World Linux Security
Threat-Driven Design
Built from real malware data collected at the network edge. Every detection signature comes from active threats seen in production hosting environments, not theoretical research.
Shell-Native & Lightweight
Pure bash with minimal dependencies. No agents, no daemons eating resources, no runtime interpreters. Runs on any Linux system from embedded devices to enterprise servers.
Community-Sustained
20+ years of open source development under GPL v2. No venture funding, no enterprise upsells. Sustained by the community of sysadmins who rely on these tools daily.
Protection Stack
Three tools, one defense-in-depth strategy. Layer them together for comprehensive Linux security.
Malware Detection
LMD
Scan & quarantine threats from real hosting threat data
Firewall Policy
APF
Stateful iptables filtering with reactive address blocking
Intrusion Prevention
BFD
Block brute-force auth attacks with modular log parsing
Connect
AboutSupport Open Source Security
R-fx Networks projects are entirely community-funded. If these tools help protect your infrastructure, consider contributing.