@Busta Yeah it's a mystery (tracked by ESET as 0nderon)
https://github.com/bl0w/bl0wsshd00r67p1
OpenSSH 6.7p1 backdoor kit. Contribute to bl0w/bl0wsshd00r67p1 development by creating an account on GitHub.