Pozzo and Lucky, a root backdoor you won't see coming (covertutils.readthedocs.io)