Post #1739284

2026-04-27 16:02 UTC

You can Watch network access - What is communicating to the outside? Why is it? What is it communicating? I like sniffnet Watch CPU and GPU usage - What is using resources? Why is it? I like Mission Center and ps auxf in the terminal What is using the disk? I like Filelight and Disk Usage Analyzer Run AV software. I don’t have any recommendations. And I guess sometimes you can also find it when benchmarking software because you want the absolute best performance. You can also assume you are compromised and use a solution like a Faraday cage. If you’re trying to detect advanced spyware, it might be better to check network activity from outside the device like what network activity is the router managing for the computer.

Replies (4)

@0t79JeIfK01RHyzo@lemmy.ml 2026-04-27 16:12

And I guess sometimes you can also find it when benchmarking software because you want the absolute best performance.

Open ##1739283
@eldavi@lemmy.ml 2026-04-27 16:47

@RavenofDespair@lemmy.ml to add to this; you can use a firewall that’s aware of what your systems is trying to contact. pfsense does this in their premium products and i’ve heard ubiquiti starting doing this as well.

Open ##1739407
@bamboo@lemmy.blahaj.zone 2026-04-27 18:46

FWIW, if you suspect your machine has been compromised, the binaries for common tools like ps and top shouldn’t be relied upon since those probably were tampered with to hide the malicious program from the output. At that point, you’d probably want to check each running process manually under /proc/.

Open ##1740028
@MrSoup@lemmy.zip 2026-04-27 20:16

As of AV software I would like to point to ClamAV and Rkhunter. Both should be available in most distro’s package repository.

Open ##1740226