New BPFDoor Controller Enables Stealthy Lateral Movement in Linux Server Attacks
In 2024, cyber researchers discovered a new controller component linked to a known backdoor known as BPFDoor during cyberattacks that targeted the retail, finance, and telecommunications industries in South Korea, Hong Kong, Myanmar, Malaysia, and Egypt.
In a technical analysis released earlier this week, Fernando Mercês, a researcher at Trend Micro, stated that the controller might open a reverse shell. Lateral movement may be made possible by this, giving attackers the ability to penetrate deeper into infiltrated networks and take control of other systems or obtain private information.
The threat organization Earth Bluecrow, also known as DecisiveArchitect, Red Dev 18, and Red Menshen, has been blamed for the campaign.
The Linux backdoor known as BPFDoor was initially discovere...