Linux Scales eBPF Rootkit: Detection and Forensic Analysis

Original text: “Linux Scales eBPF Rootkit Detection and Analysis” — Sandfly Security (Sandfly Blog), 24 June 2026. Author not individually credited on the source page. Commands, screenshots and figures below are reproduced with attribution captions.

Executive Summary

Scales is a Linux malware family that surfaced through a supply-chain campaign against the Arch User Repository (AUR),…

https://core-jmp.org/2026/06/linux-scales-ebpf-rootkit-detection-analysis/