Library Header Image Library Header Image

RSAC 2026 Conference Quick Look: Sleeper Cells in the Telecom Backbone: Covert Ops


Posted on in Videos

This Quick Look provides a short preview of the full session being presented at RSAC 2026 Conference. BPFDoor is a stealth Linux backdoor used by the China-linked Red Menshen group to infiltrate telecom backbone infrastructure. Our research reveals new 2024–2025 variants tailored to telecom environments, exposing previously undisclosed adaptations and C2 tradecraft. By connecting malware evolution, targeting, and operations, we map how these actors sustain covert global telecom espionage.
Contributors
Christiaan Beek

VP of Cyber Intelligence, Rapid7


Share With Your Community

Related Videos