BPFDoor and Symbiote Rootkits Attacking Linux Systems Exploiting eBPF Filters

Two sophisticated Linux rootkits are posing increasingly serious threats to network security by exploiting eBPF technology to hide their presence from traditional detection systems. BPFDoor and Symbiote, both originating from 2021, represent a dangerous class of malware that combines advanced kernel-level access with powerful evasion capabilities. In 2025 alone, security researchers detected 151 new samples […]

The post BPFDoor and Symbiote Rootkits Attacking Linux Systems Exploiting eBPF Filters appeared first on Cyber Security News.