diff --git a/volatility3/framework/plugins/linux/process_spoofing.py b/volatility3/framework/plugins/linux/malware/process_spoofing.py
similarity index 100%
rename from volatility3/framework/plugins/linux/process_spoofing.py
rename to volatility3/framework/plugins/linux/malware/process_spoofing.py