CERT24eBPF Rootkits: Why Underground Actors Are Taking NoticeLoading data…
CERT24Threat Observatory
Period

eBPF Rootkits: Why Underground Actors Are Taking Notice

Flare’s research found eBPF rootkit source code and step-by-step tutorials on underground forums. The material describes process hiding, activation with specially crafted packets, traffic concealment, and the use of XDP.

← Back to intelligence

eBPF Rootkits: Why Underground Actors Are Taking Notice

Flare’s research found eBPF rootkit source code and step-by-step tutorials on underground forums. The material describes process hiding, activation with specially crafted packets, traffic concealment, and the use of XDP.