The Dark Side of the ForSSHe // a Landscape of OpenSSH Backdoors [pdf]

Just to clarify: the title refers to backdoors in malware executables based on OpenSSH, not in the OpenSSH source.

> All of [the backdoors] are the result of modifying and recompiling the original portable OpenSSH source

Story is also reported in: https://www.zdnet.com/article/eset-discovers-21-new-linux-ma...