Shell Profile Persistence via Tensorflow Hardware Compatibility Check Hook Marker

Duo Tech@duotech

•updated Jul 24, 2026•2•0•3

Detects creation or modification of a shell profile (.bashrc/.zshrc/etc.) containing the exact 'tensorflow hardware compatibility check' marker used by the mrmustard stealer to disguise its persistence hook.