The U.S. Computer Emergency Readiness Team (CERT) has issued a warning for what it calls “active attacks” against Linux-based computing infrastructures using compromised SSH keys.The attack appears to initially use stolen SSH keys to gain access to a system, and then uses local kernel exploits to gain root access. Once root access has been obtained, a rootkit known as “phalanx2″ is installed, US-CERT said in a note on its current activity site.
Phalanx2 appears to be a derivative of an older rootkit named “phalanx”. Phalanx2 and the support scripts within the rootkit, are configured to systematically steal SSH keys from the compromised system. These SSH keys are sent to the attackers, who then use them to try to compromise other sites and other systems of interest at the attacked site.
Phalanx, which dates back to 2005, is a self-injecting kernel rootkit designed for the Linux 2.6 branch. It allows an attacker to hide files, processes and sockets and includes a tty sniffer, a tty connectback-backdoor, and auto injection on boot.
Link: More at ZDNet
When people think that "Security" is a product like Linux or OpenBSD or Vista that they just install and "are secure", they have fallen into an awful pit of hubris.
When people think that "Security" is a product like Linux or OpenBSD or Vista that they just install and "are secure", they have fallen into an awful pit of hubris.
Besides, this article stinks of "Linucks ain't prefect!!1". Captain Obvious is still kicking around somewhere I guess.
Besides, this article stinks of "Linucks ain't prefect!!1". Captain Obvious is still kicking around somewhere I guess.
Like I have said throughout my posting history here on Neowin, "Security is a process not a product."
Maybe there is some mistake? Such hell machine could not possibly exist for linux. Voices are telling me not to belive it.. Linux is secure, Linux is secure, Linux is secure, Linux is secure...
Maybe there is some mistake? Such hell machine could not possibly exist for linux. Voices are telling me not to belive it.. Linux is secure, Linux is secure, Linux is secure, Linux is secure...
You forgot to take your little penguin-shaped pill again, didn't you?
Maybe there is some mistake? Such hell machine could not possibly exist for linux. Voices are telling me not to belive it.. Linux is secure, Linux is secure, Linux is secure, Linux is secure...
You forgot to take your little penguin-shaped pill again, didn't you?
Can you provide a source?
Muhammad, is that you?
The human factor.
*somthing from linux fanboys*
Post x2:
*somthing from MS fanboys*
Post x3:
*somthing from Apple fanboys*
Post x4:
*something stupid about don't caring about pc's and computers from stupid console fanboys*
All OS have bugs, so don't be blind fanboys guys and girls.
Well, you Gates slaves stick with your bug-riddled crash-tastic Windows set-up if you like, we'll have the last laugh.
Well, you tux freaks stick with your open source **** if you like, we'll have the last laugh.
Well, you Apple fanboys can bite my shiny metal ass, cos us OS2 superheroes will have the last laugh in the end, you simpering ****tards.
Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!
Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.