Comment by circusfly

Could the backdoor have targeted Wireguard instead of ssh?