SYMBOLCOMMON_NAMEaka. SYNONYMS
elf.linkpro (Back to overview)

LinkPro


According to Synacktiv, LinkPro targets the GNU/Linux systems and is developed in Golang. It is named after its main module and the corresponding (private) GitHub repository. LinkPro uses eBPF technology, to activate only when receiving a "magic package", and to hide on the compromised system.

References
2025-10-14SynacktivTheo Letailleur
LinkPro: analysis of an eBPF rootkit
LinkPro vGet

There is no Yara-Signature yet.