RSAC 2026 Conference Quick Look: Sleeper Cells in the Telecom Backbone: Covert Ops | RSAC Conference

Skip to Main Content

Top-Rated Sessions from RSAC 2026 now on demand. Explore.

Questions?

Posted on February 20, 2026 in Videos

This Quick Look provides a short preview of the full session being presented at RSAC 2026 Conference. BPFDoor is a stealth Linux backdoor used by the China-linked Red Menshen group to infiltrate telecom backbone infrastructure. Our research reveals new 2024–2025 variants tailored to telecom environments, exposing previously undisclosed adaptations and C2 tradecraft. By connecting malware evolution, targeting, and operations, we map how these actors sustain covert global telecom espionage.

Contributors

Christiaan Beek

VP of Cyber Intelligence, Rapid7

View More Videos

Share With Your Community

Related Videos