Linux backdoors

Linux Backdoors Disguised as Email Security Tools Target Telecom Infrastructure in Korea and Taiwan

Researchers have identified Linux-based backdoors targeting telecom and network appliances in South Korea and Taiwan. The malware disguises its network traffic and process names as legitimate email services to blend in with normal administrative traffic and evade endpoint and network security controls. The campaign highlights the ongoing use of defense-evasion techniques that borrow legitimate binary names to avoid detection.