Spyware
SEASPY
According to CISA, this malware is a persistent backdoor that masquerades as a legitimate Barracuda Networks service.
SEASPY is a Linux spyware.
Background
CISA characterizes this malware as a persistent backdoor that poses as a genuine Barracuda Networks service. It waits for commands sent by the attacker's Command-and-Control over TCP packets. Once running, it uses a libpcap sniffer to watch traffic for a magic packet on TCP port 25 (SMTP) and TCP port 587, inspecting captured packets for a hard-coded string. When the expected packet sequence arrives, it opens a TCP reverse shell back to the C2 server, letting the threat actor run arbitrary commands on the victim host. The implant is built on the open-source backdoor known as "cd00r".
Source: Malpedia (Fraunhofer FKIE).