Rootkit.Linux.Snaksoa is an experimental agent that targets the latest 64-bit Debian Squeezy kernel (2.6.32-5) The rootkit is able to infect victims with an iFrame injection attack, an iframe injection is an injection of iframe tags into a page allowing downloading of executable application that contains a malware in it. CrowdStrike suggested that Russia is the most likely origin of the rootkit. The malware appears as a product of state sponsored project still in progress or as a result of a professionals cybercriminal experiment.”]
Source: https://securityaffairs.co/wordpress/10489/malware/new-experimental-rootkit-menaces-linux-os.html