A reported cyberespionage campaign has targeted government Linux infrastructure with custom malware, web shells, and credential-theft capabilities, according to the original Unit 42-indexed item.