Kernel-level Linux rootkit · 4.17–7.x · x86_64 · ftrace hooks (24) · Google C2 · Zero non-Google traffic · Self-rebuilds on kernel upgrade · Evades chkrootkit, rkhunter, and unhide
linux google backdoor apt calendar rootkit malware clamav rkhunter bypass gdrive unhide c2 chkrootkit apt41 rkhunter-antirootkit lyris
-
Updated
Aug 7, 2026