Security researchers have found an experimental rootkit probably focused at a narrowly defined Debian users.