How one volunteer stopped a backdoor from exposing Linux systems worldwide