[Intel]: https://www.deepinstinct.com/blog/bpfdoor-malware-evolves-stealthy-sniffing-backdoor-ups-its-game

[timb-machine]

Area

Malware reports

Parent threat

Persistence, Defense Evasion, Command and Control

Finding

https://www.deepinstinct.com/blog/bpfdoor-malware-evolves-stealthy-sniffing-backdoor-ups-its-game

Industry reference

attack:T1205.002:Socket Filters
attack:T1036:Masquerading
attack:T1070:Indicator Removal on Host
attack:T1205:Traffic Signaling
attack:T1573:Encrypted Channel
attack:T1106:Native API

Malware reference

BPFDoor
/malware/binaries/BPFDoor

Actor reference

No response

Component

Linux

Scenario

No response