Linux Backdoors Impersonate Email Security Tools to Evade Detection in Korea and Taiwan

Linux backdoors are being used to target telecom and network appliances in South Korea and Taiwan. These backdoors disguise their traffic as email services and legitimate processes to avoid detection. Threat actors are using a defense evasion tactic by naming their malicious software after legitimate operating system components or processes. This naming strategy allows the malware to blend in by borrowing the name of a real binary, making it harder to detect. The goal of this tactic is to evade detection by making the malicious activity appear as normal traffic.