Hello everybody!
I can say I'm a newbie at Linux. Wanted to ask about Linux' task viewers. On the famous task viewers such as bpytop, htop etc., can viruses hide from them? Excluding the injected codes, can virus & tracker/logger softwares hide from classic task viewers of Linux? Do they show all kinds of services and running tasks?
It also depends on the viewer. I remember using prctl() in C to chamge a process name and top showed my change but htop didn't. I'm sure a competent malware writer would be able to trick it though
True. There are various legitimate tools that are only really one step away from malware, so it's not too hard to imagine going that one step further.
Thinking specifically of the fact that a new process is allowed to change its apparent name, as well as creating secondary process pools, but there are bound to be other, deeper ways.