New eBPF Filters for Symbiote and BPFdoor Malware | FortiGuard Lab FortiGuard Labs discovered new Symbiote and BPFDoor variants exploiting eBPF filters to enhance stealth through IPv6 support, UDP traffic, and dynamic port hopping for covert C2 communication.…

Variants of 2025 of Symbiote and BPFDoor support IPv6, UDP communication with C2.

Reverse engineering the samples with r2ai and r2mcp.

www.fortinet.com/blog/threat-...

#malware #Linux #BPF #r2ai #r2mcp