TripleCross - A Linux eBPF Rootkit With A Backdoor, C2, Library Injection, Execution Hijacking, Persistence And Stealth Capabilities.

http://www.kitploit.com/2022/11/triplecross-linux-ebpf-rootkit-with.html