T1564

Hide Artifacts

discovered 2026-06-03

Conceals its own processes, sockets and on-host artifacts via the eBPF component and binary path masquerade.

View on MITRE ATT&CK

Seen in packages

Campaigns