"Showboat" doesn't show off, but clearly it doesn't need to, as it's long helped China spy on small market communications providers.

A Chinese cyber-espionage campaign has been targeting telecommunications providers with newly discovered Linux and Windows malware dubbed Showboat and JFMBackdoor, respectively.

Showboat targets Linux telecom systems since mid-2022, enabling C2 access, proxying, and file theft across multiple countries.