Tengu combines hardware watchdog abuse with multiple persistence mechanisms into a self-protection system that circumvents Defender termination through forced reboots of compromised Linux devices.
VerdantBamboo strategically exploits Linux appliances in under-protected network positions as an access bridge to compromise high-value targets and bypass network security mechanisms.