ring is a ring 0 (kernel mode) rootkit for the linux kernel from version 2 to 5+
features
- give a user root privileges
- hide itself
- hide/unhide files and directories
- hide/unhide processes
- hide/unhide network connections
- hidden persistence
- backconnect
- sniff ssh passwords
- vm detection