[Intel]: https://vms.drweb.com/virus/?i=21004786

### Area

Malware reports

### Parent threat

Persistence, Defense Evasion

### Finding

https://vms.drweb.com/virus/?i=21004786

### Industry reference

attack:T1205.002:Socket Filters
attack:T1036:Masquerading

### Malware reference

BPFDoor
Tricephalic Hellkeeper
Unix.Backdoor.RedMenshen
JustForFun

### Actor reference

DecisiveArchitect

### Component

Linux

### Scenario

_No response_

