Chinese cyberspies use new SSH backdoor in network device hacks

FortiGuard researchers have documented ELF/Sshdinjector.A!tr, a malicious suite attributed to the Chinese APT Evasive Panda that injects a malicious SSH library into the SSH daemon of compromised network appliances to provide persistent backdoor access, credential theft, process monitoring, file transfer, remote shells, and other C2-driven actions; the report details the infection chain, 15 supported commands, persistence components, detection names, and VirusTotal sample hashes.