Which one? There was the 2020 one by winnti group that attacked Linux servers for a decade, and another in 2021/22 called symbiote, but I don’t know how long that one was hidden for.