Linux BPFDoor Backdoor Detection

This YARA rule detects the BPFDoor backdoor, a sophisticated Linux-based malware. It identifies specific byte patterns (strings) associated with different versions of BPFDoor's packet loop, reverse shell functionality, and process name manipulation. The rule looks for two main versions of these components, ensuring a comprehensive detection of the malware's core functionalities.