Linux Backdoors Impersonate Email Security Tools to Evade Detection in Korea and Taiwan

Linux backdoors targeting telecom and network appliances in South Korea and Taiwan disguise their traffic as email services and use legitimate-looking process names to evade detection. Threat actors name malicious software after real operating system components or binaries as a defense evasion measure, blending in with normal system activity to avoid triggering security alerts.