China-linked Red Menshen APT deploys stealthy BPFDoor implants in telecom networks

Rapid7 and reporting indicate a China-linked APT dubbed Red Menshen has conducted a long-term espionage campaign (since at least 2021) against telecommunications providers in the Middle East and Asia, deploying highly stealthy kernel-level BPFdoor/eBPF implants and related tooling to surveil signaling, subscriber data, and government communications while remaining difficult to detect; the report includes technical analysis, evolved variants, stealth techniques, and IoCs.