<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[Black Lotus Labs identified “Showboat,” a Linux post-exploitation framework tied to PRC-aligned telecom targeting campaigns.]]></title><description><![CDATA[<p>Black Lotus Labs identified “Showboat,” a Linux post-exploitation framework tied to PRC-aligned telecom targeting campaigns.</p><p>Researchers say the malware enabled persistence, proxying, remote shell execution, and maintained a 0% VirusTotal detection rate for months.</p><p><div class="card col-md-9 col-lg-6 position-relative link-preview p-0">



<a href="https://www.technadu.com/showboat-a-novel-linux-post-exploitation-framework-targeting-telecommunications/628291/" title="Showboat: A Novel Linux Post-Exploitation Framework Targeting Telecommunications">
<img src="https://cdn.technadu.com/wp-content/uploads/2026/05/Undersea-Fiber-Cables-Telecom-Signal-Nodes-Linux-Terminal-Reflections-Cargo-Ships.jpg" class="card-img-top not-responsive" style="max-height: 15rem;" alt="Link Preview Image" />
</a>





<div class="card-body">
<h5 class="card-title">
<a href="https://www.technadu.com/showboat-a-novel-linux-post-exploitation-framework-targeting-telecommunications/628291/">
Showboat: A Novel Linux Post-Exploitation Framework Targeting Telecommunications
</a>
</h5>
<p class="card-text line-clamp-3">Showboat is a novel Linux post-exploitation framework utilized by PRC-aligned actors to target global telecommunications providers.</p>
</div>
<a href="https://www.technadu.com/showboat-a-novel-linux-post-exploitation-framework-targeting-telecommunications/628291/" class="card-footer text-body-secondary small d-flex gap-2 align-items-center lh-2">



<img src="https://cdn.technadu.com/wp-content/uploads/2018/03/cropped-TechNadu-Logo_TechNadu-V-1-Black-copy-1-32x32.png" alt="favicon" class="not-responsive overflow-hiddden" style="max-width: 21px; max-height: 21px;" />







<p class="d-inline-block text-truncate mb-0">TechNadu <span class="text-secondary">(www.technadu.com)</span></p>
</a>
</div></p><p><a href="https://infosec.exchange/tags/Cybersecurity" rel="tag">#<span>Cybersecurity</span></a> <a href="https://infosec.exchange/tags/Linux" rel="tag">#<span>Linux</span></a> <a href="https://infosec.exchange/tags/Malware" rel="tag">#<span>Malware</span></a> <a href="https://infosec.exchange/tags/ThreatIntel" rel="tag">#<span>ThreatIntel</span></a></p>

<div class="row mt-3"><img class="img-thumbnail" src="https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/618/438/548/477/856/original/ef7790b23baf7e74.png" alt="Link Preview Image" /></div>]]></description><link>https://board.circlewithadot.net/topic/fbbf15b0-b5ca-4f78-b21b-14bc7a48901a/black-lotus-labs-identified-showboat-a-linux-post-exploitation-framework-tied-to-prc-aligned-telecom-targeting-campaigns.</link><generator>RSS for Node</generator><lastBuildDate>Mon, 25 May 2026 06:28:13 GMT</lastBuildDate><atom:link href="https://board.circlewithadot.net/topic/fbbf15b0-b5ca-4f78-b21b-14bc7a48901a.rss" rel="self" type="application/rss+xml"/><pubDate>Fri, 22 May 2026 13:22:48 GMT</pubDate><ttl>60</ttl></channel></rss>