PUMAKIT, a sophisticated rootkit that uses advanced stealth mechanisms 

PUMAKIT is a sophisticated Linux loadable kernel module (LKM) rootkit analyzed by Elastic Security Lab that employs ftrace-based syscall and kernel-function hooking to hide files and processes, perform privilege escalation, and evade system tools and debugging. The report describes a multi-stage dropper and memory-resident components, a structured command interface processed via an intercepted rmdir syscall, support for older kernels via kallsyms_lookup_name usage, and provides detection resources including YARA rules for the dropper, loader, LKM, and associated shared objects.