file_path

~/.config/systemd/user/<daemon>.service

discovered 2026-06-23

systemd USER service unit installed for persistence, masquerading as a benign daemon (colord, haveged). Loads ~/.local/bin/<daemon> (Amazon Inspector).

Campaigns

Linked packages

Read the full analysis →