Ubuntu pre-release channel mentioned as a target for deploying the backdoor.
Mentioned in 1 video
Veritasium