Threats & Adversaries · APT / Espionage
China‑Linked Red Menshen Embeds Stealthy Implants in Telecom Cores The implants lie dormant in Linux kernels and can surveil signaling and subscriber traffic, enabling targeted espionage against telecoms, government, and finance sectors.
4 sources · Mar 27
Timeline Sources Mar 27 Dark Reading
China Upgrades the Backdoor It Uses to Spy on Telcos Globally
Chinese APT Red Menshen's super-advanced BPFdoor malware defeats traditional cybersecurity protections. All telcos can do, really, is try hunting it down.
original Mar 27 The Hacker News
China-Linked Red Menshen Uses Stealthy BPFDoor Implants to Spy via Telecom Networks
China-linked Red Menshen embeds BPFDoor in telecom networks since 2021, enabling stealth espionage via kernel implants.
original Mar 26 Help Net Security
Researchers release tool to detect stealthy BPFDoor implants in critical infrastructure networks - Help Net Security
Researchers have released a scanning script to help with detection of hard-to-spot BPFDoor implants used by Salt Typhoon.
original Part of the PlainSec briefing for 2026-03-28
Every edition of this story: China‑Linked Red Menshen Embeds Stealthy Implants in Telecom Cores
More from today Threats & Adversaries · APT / Espionage
China‑Linked Red Menshen Embeds Stealthy Implants in Telecom Cores The implants lie dormant in Linux kernels and can surveil signaling and subscriber traffic, enabling targeted espionage against telecoms, government, and finance sectors.
4 sources · Mar 27
Timeline Sources Mar 27 Dark Reading
China Upgrades the Backdoor It Uses to Spy on Telcos Globally
Chinese APT Red Menshen's super-advanced BPFdoor malware defeats traditional cybersecurity protections. All telcos can do, really, is try hunting it down.
original Mar 27 The Hacker News
China-Linked Red Menshen Uses Stealthy BPFDoor Implants to Spy via Telecom Networks
China-linked Red Menshen embeds BPFDoor in telecom networks since 2021, enabling stealth espionage via kernel implants.
original Mar 26 Help Net Security
Researchers release tool to detect stealthy BPFDoor implants in critical infrastructure networks - Help Net Security
Researchers have released a scanning script to help with detection of hard-to-spot BPFDoor implants used by Salt Typhoon.
original Part of the PlainSec briefing for 2026-03-28
Every edition of this story: China‑Linked Red Menshen Embeds Stealthy Implants in Telecom Cores
More from today