SMTP is the key: BPFDoor and AVERAT hitting the network edge

Rapid7 tracked Linux implants blending into telecom environments, including a new BPFDoor variant, a BPF Rekoobe build seen against South Korean targets, and six builds of a Linux implant it calls AVERAT deployed against Taiwanese appliances. The research also details source code for the BPFDoor controller.