A pluggable authentication module is a mechanism to integrate multiple low-level authentication schemes into a high-level application programming interface. From Wikipedia
Nextron’s findings highlight how Plague embeds into the Linux authentication stack to achieve persistence