分析简版-英文

**Executive summary:** Bvp47 is a highly advanced, long-lived Linux backdoor (named from 'Bvp' and 0x47) analyzed by Pangu Lab and linked via leaked Shadow Brokers files (including RSA private keys) to the Equation Group/NSA; it implements a stealthy SYN-knock/BPF kernel-level covert channel, kernel module/rootkit techniques (inline hooks, SELinux bypass, custom LKM loader), multi-slice encrypted payloads, and complex crypto for C2, and was observed in a large, multi-year global campaign affecting hundreds of hosts across dozens of countries.