
VoidLink Rootkit Exploits eBPF and Kernel Modules For Stealth On Linux
VoidLink is a sophisticated, cloud-native Linux malware framework that leverages a rare hybrid architecture to maintain deep stealth on compromised systems. First documented by Check Point Research in January 2026, this modular framework features over 30 plugins and has evolved across multiple generations to target Linux distributions ranging from CentOS 7 to Ubuntu 22.04. A […] The post VoidLink Rootkit Exploits eBPF and Kernel Modules For Stealth On Linux appeared first on Cyber Security News.