[Intel]: https://github.com/Neo23x0/signature-base/blob/master/yara/mal_lnx_implant_may22.yar

[timb-machine]

Area

Other rules

Parent threat

No response

Finding

https://github.com/Neo23x0/signature-base/blob/master/yara/mal_lnx_implant_may22.yar

Industry reference

attack:T1205.002:Socket Filters

Malware reference

BPFDoor Tricephalic Hellkeeper Unix.Backdoor.RedMenshen JustForFun https://github.com/timb-machine/linux-malware/issues/418

Actor reference

DecisiveArchitect

Component

Linux

Scenario

No response