China-Linked Red Menshen Uses Stealthy BPFDoor Implants to Spy via Telecom Networks
2026-03-27T07:24:04Z•fdef2380b8fe670cdb6f2cb207140811692a55e6dd2eb5d7731daf9a597a60ac
BPFDoorChina-linkedEarth BluecrowRed Menshenbackdoorcritical infrastructureeBPFespionagegovernment targetskernel implantlong-term campaignpersistencestealthy implantstelecom networks
What happened
A long-running China-linked espionage campaign attributed to the Red Menshen (aka Earth Bluecrow) cluster has implanted stealthy BPFDoor implants inside telecom networks to gain and maintain covert access to government and critical infrastructure environments. The activity involves kernel-level/eBPF-based implants and persistent strategic positioning within carrier environments to enable long-term surveillance, lateral access, and data exfiltration while avoiding detection.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- fdef2380b8fe670cdb6f2cb207140811692a55e6dd2eb5d7731daf9a597a60ac
- Enrichment time
- 2026-03-27T07:24:04Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.