Topic: magic packets

New tool detects BPFDoor implants in critical infrastructure

A new scanning tool has been released to help detect the stealthy BPFDoor backdoor, a kernel-level implant used by the China-linked Red Menshen group to persistently target global telecom, finance, and retail sectors. BPFDoor operates by abusing kernel-level packet filtering to listen for covert ...