BPFDoor — an active Chinese global surveillance tool

PwC Threat Intelligence documented the existence of BPFDoor. It allows a threat actor to backdoor a system for remote code execution, without opening any new network ports or firewall rules.