[Intel]: https://www.pangulab.cn/files/The_Bvp47_a_top-tier_backdoor_of_us_nsa_equation_group.en.pdf

[timb-machine]

Area

Malware reports

Parent threat

Persistence, Command and Control

Finding

https://www.pangulab.cn/files/The_Bvp47_a_top-tier_backdoor_of_us_nsa_equation_group.en.pdf

Industry reference

attack:T1205:Traffic Signaling
attack:T1205.002:Socket Filters
attack:T1573.002:Symmetric Cryptography
attack:T1573.002:Asymmetric Cryptography
attack:T1082:System Information Discovery
attack:T1547.006:Kernel Modules and Extensions

Malware reference

Bvp47
dewdrop
tipoff
StoicSurgeon
Incision

Actor reference

Equation Group

Component

Linux
Solaris
FreeBSD

Scenario

No response