it would be good to watch this one: SSHD rootkit hitting mainly RPM based Linux distributions https://isc.sans.edu/diary/SSHD+rootkit+in+the+wild/15229 any thoughts from our security oriented folk?