OTX Threat: SMTP is the key: BPFDoor and AVERAT hitting the network edge

A sophisticated multi-component campaign targeting telecommunications and network-edge appliances has been discovered, featuring BPFDoor variants and a newly identified implant designated AVERAT. The operation leverages SMTP traffic on port 25 to blend command-and-control communications with legitimate mail relay activity, exploiting the trust environments of targeted systems. Attackers deploy a d CVEs: CVE-2026-63520 Sectors: Telecommunications