Kernel Mod Rootkits on Modern Linux Systems (by Alex Caceres)

botconf eu·34 min

• BOTCONF
• Malware
• Date: 2025
• Location: Botconf

David Álvarez Pérez

David Álvarez Pérez analyzes Syslogk Linux Kernel Rootkit - Executing Bots via “Magic Packets”.

Main Stage·43 min

• DEF CON
• Malware
• Date: Aug 2021
• Location: Las Vegas

PatH

PatH demonstrates utilizing extended Berkeley Packet Filters (eBPF) to create kernel rootkits without writing kernel modules, presenting defensive detection mechanisms.

Main Stage·49 min

• DEF CON
• Malware
• Date: Aug 2021
• Location: Las Vegas

Guillaume Fournier · Sylvain Afchain · Sylvain Baubeau

Security researchers demonstrate offensive and defensive eBPF capabilities, manipulating kernel tracing data to conceal attacks and building resilient detectors.