{"version":"1.0","type":"rich","provider_name":"RootPwn","provider_url":"https://rootpwn.me","title":"Linux Rootkits: Hooking Evolution and Defensive Implications","description":"Linux rootkits have moved from simple user‑space hijacking to sophisticated eBPF and io_uring hooks that embed malicious logic directly into the kernel. Attackers use these techniques to evade detection and maintain persistence. Defenders should monitor kernel integrity, audit eBPF programs, and val","url":"https://rootpwn.me/news/linux-rootkits-hooking-evolution-and-defensive-implications","thumbnail_url":"https://rootpwn.me/images/7c1df1b181ac460d91b8912fe3b23a60.jpg","thumbnail_width":1600,"thumbnail_height":900}