OpenSSH 8 Password Backdoor is a malicious version of OpenSSH client that logs usernames and passwords to hidden directory opt…/log.txt
This software replaces the legitimate copy of the client typically at /usr/bin/ssh
https://packetstorm.news/files/id/178064