Https://www.deepinstinct.com/blog/bpfdoor-malware-evolves-stealthy-sniffing-backdoor-ups-its-game

Yara Rule - 알 수없는 Linux 임플란트 감지 (KR 및 MO에서 업로드) 관련 IOC 2개 발견

Yara 정의.

Neo23x0
Yara Rule - Detects unknown Linux implants (uploads from KR and MO)

Yara definition.
https://github.com/Neo23x0/signature-base/commit/52260fa9e26d20a8931c7d5d708c3d0178714480