A whole range of Ubuntu sites and services seem to be affected.
The stealthy Python-based backdoor framework deploys a persistent Windows implant likely designed for espionage.