Perfctl malware is hard to detect, persists after reboots, and can perform a breadth of malicious activities.
https://www.wired.com/story/perfctl-stealthy-malware-infected-linux-systems/
https://www.wired.com/story/perfctl-stealthy-malware-infected-linux-systems/