Chinese Backdoor for Telecom Systems
A while ago we showed the backdoor that the Chinese have been using to maintain persistence across telecom systems.
The backdoor attaches itself to a raw network socket and inspects incoming traffic. It sees packets before firewall rules have a chance to process them. So even if your firewall is configured correctly, the backdoor can still see traffic that should have been blocked.
To access the system hackers send a magic byte to get a reverse shell
https://hackers-arise.com/compromising-telecom-systems-deploying-and-detecting-the-bpfdoor-backdoor/
A while ago we showed the backdoor that the Chinese have been using to maintain persistence across telecom systems.
The backdoor attaches itself to a raw network socket and inspects incoming traffic. It sees packets before firewall rules have a chance to process them. So even if your firewall is configured correctly, the backdoor can still see traffic that should have been blocked.
To access the system hackers send a magic byte to get a reverse shell
https://hackers-arise.com/compromising-telecom-systems-deploying-and-detecting-the-bpfdoor-backdoor/
Hackers Arise - EXPERT CYBERSECURITY TRAINING FOR ETHICAL HACKERS
Compromising Telecom Systems: Deploying and Detecting the BPFDoor Backdoor - Hackers Arise
BPFDoor is a stealthy Linux backdoor that hides at the kernel level and listens silently for a “magic packet” to activate.