RotaJakiro: A long live secret backdoor with 0 VT detection
It's <i>systemd-daemon</i>. The authors knew that systemd was so huge and opaque that it'd go unnoticed. It even has its own systemd unit file.<p>It doesn't even do "normal" rootkit level of hiding that rootkit detectors might notice; it just hides in plain site as an innocent root process, right out in the open.