For starters, the backdoor was technically really sophisticated. For example, the malicious code circumvents a hardening technique (RELRO) in a clever way, whi

For starters, the backdoor was technically really sophisticated. For example, the malicious code circumvents a hardening technique (RELRO) in a clever way, which would otherwise have blocked it from manipulating the sshd code in the same process space at runtime. This is not something that script kiddies usually cook up in an afternoon to make a quick buck. You need experts and a lot of time to pull off feats like that. This points to an organization with excellent funding. I’m not surprised at all that people are attributing this to some unknown nation-level group.