Researchers from Checkpoint have discovered a never-before-seen framework, referred to in its source code as VoidLink, that infects Linux machines with a wide assortment of modules. VoidLink features more than 30 modules that can be mixed and matched to provide stealth and tools for reconnaissance, privilege escalation, and lateral movement.