[Intel]: https://www.cisa.gov/news-events/analysis-reports/ar23-209a

### Area

Malware reports

### Parent threat

Persistence

### Finding

https://www.cisa.gov/news-events/analysis-reports/ar23-209a

### Industry reference

https://github.com/timb-machine/linux-malware/issues/729

### Malware reference

SUBMARINE
wltm

### Actor reference

_No response_

### Component

Linux

### Scenario

_No response_