Library Header Image Library Header Image

Top-Rated Follow Up: Sleeper Cells in the Telecom Backbone: Covert Ops


Broadcast on in Top-Rated Session Follow Ups

Top-Rated Follow Up: Sleeper Cells in the Telecom Backbone: Covert Ops

September 16, 2026 | 11:00 AM PT | 2:00 PM ET

Join Christiaan Beek for a live follow-up to his Top Rated RSAC 2026 Conference session, where he'll share new discoveries from the ongoing investigation into BPFDoor, the stealth Linux backdoor linked to the China-based Red Menshen group's telecom infrastructure campaigns.

Since the original presentation, the research has continued, and Christiaan will walk through newly identified 2024–2025 variants built specifically for telecom environments, along with previously undisclosed adaptations in the group's command-and-control tradecraft. He'll connect the dots between malware evolution, targeting patterns, and operational behavior to show how this threat actor has sustained a long-running, covert espionage campaign against global telecom networks.

This session is interactive by design. Bring your questions: Christiaan will close with a live Q&A held under Chatham House Rule (not recorded), giving attendees a chance to dig deeper into the technical details and implications for defending critical telecom infrastructure. The first portion of this session will be recorded and available afterward.

Contributors
Christiaan Beek

VP of Cyber Intelligence, Rapid7


Share With Your Community

Register for the Event