LinkPro Linux Rootkit Uses eBPF to Hide and Activates via Magic TCP Packets

Source: The Hacker News | Added:

A new GNU/Linux rootkit named LinkPro has been discovered, which utilizes eBPF modules to hide its presence and enable remote activation. This finding emerged from an investigation into a compromised AWS-hosted infrastructure.

---

Impact: Not specified

In the Wild: Unknown

Age: Newly disclosed

Remediation: Not specified

Read Full Original Article →