Passively load a monitoring shared object into an Oracle process
Using LD_PRELOAD to implement a hidden trojan in an oracle database
You can also follow the links there. Like this one: https://yurichev.com/writings/oracle.pdf