Tag: kernel exploits

Underground Actors Exploit eBPF for Linux Rootkits

Meet the underground actors who are turning eBPF into a powerful tool for Linux rootkits, exploiting its ability to run sandboxed programs inside the Linux kernel to manipulate system activity undetected. They're using it to hide processes, encrypt C2 traffic, and more, forcing us to rewrite the rootkit playbook.