A new Linux Trojan, perhaps nation state backed
https://securelist.com/blog/research/67962/the-penquin-turla-2/
Powerful, highly stealthy Linux trojan may have infected victims for years | Ars Technica
the known C&C server, does not show up on the current ATP filter, so might be a good idea to add it to black list.
news-bbc[.]podzone[.]org 80[.]248[.]65[.]183
This thread was automatically locked due to age.