In this video, I will demonstrate how to identify a trojan-horse process hiding in plain sight - easily missed when you look through the output of standard 'ps', 'top', and 'htop' utilities. The technique I demonstrate will guide you in finding actual program binaries corresponding to user processes in memory.
...
https://www.youtube.com/watch?v=tegBIa8UxkY