Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > alt.os.linux > #51794

Re: New Linux crypto-miner steals your root password and disables your antivirus

From Jean-David Beyer <jeandavid8@verizon.net>
Newsgroups alt.os.linux, comp.os.linux.misc
Subject Re: New Linux crypto-miner steals your root password and disables your antivirus
Date 2018-11-24 16:51 -0500
Organization NewsGuy.com
Message-ID <ptch5u0951@news2.newsguy.com> (permalink)
References <ptbkdh$7jg$1@news.mixmin.net> <slrnpvipes.iu1.BitTwister@wb.home.test> <g5tgjhFs1dmU1@mid.individual.net>

Cross-posted to 2 groups.

Show all headers | View raw


On 11/24/18 12:37 PM, J.O. Aho wrote:
> On 11/24/18 3:53 PM, Bit Twister wrote:
>> On Sat, 24 Nov 2018 07:41:01 -0600, Nomen Nescio wrote:
>>> <https://www.zdnet.com/article/new-linux-crypto-miner-steals-your-root-password-and-disables-your-antivirus/>
>>
>> Heheheh, look at the CVE -20xx dates.
>>
>> "Once the trojan has a foothold on the system it uses one of two
>> privilege escalation exploits CVE-2016-5195 (also known as Dirty COW)
>> and CVE-2013-2094 to get root permissions and have full access to the OS."
>>
>> Hopefully your system has the fixes that are more than a year old.
> 
> It also needs an unpatched kernel that is version 3.8.8 or less, which
> you maybe can find on quite old android phones.
> 

Mine is
Sep 18 10:32 vmlinuz-2.6.32-754.6.3.el6.x86_64
that was updated about two months ago. You can see by its file name that
it has had an awful lot of backport security fixes from Red Hat.

-- 
  .~.  Jean-David Beyer          Registered Linux User 85642.
  /V\  PGP-Key:166D840A 0C610C8B Registered Machine  1935521.
 /( )\ Shrewsbury, New Jersey    http://linuxcounter.net
 ^^-^^ 16:45:01 up 46 days, 1:28, 2 users, load average: 4.68, 4.70, 4.62

Back to alt.os.linux | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

New Linux crypto-miner steals your root password and disables your antivirus Nomen Nescio <noreply@mixnym.net> - 2018-11-24 07:41 -0600
  Re: New Linux crypto-miner steals your root password and disables your antivirus Bit Twister <BitTwister@mouse-potato.com> - 2018-11-24 08:53 -0600
    Re: New Linux crypto-miner steals your root password and disables your antivirus "J.O. Aho" <user@example.net> - 2018-11-24 18:37 +0100
      Re: New Linux crypto-miner steals your root password and disables your antivirus Jean-David Beyer <jeandavid8@verizon.net> - 2018-11-24 16:51 -0500
  Re: New Linux crypto-miner steals your root password and disables your antivirus Nomen Nescio <nobody@dizum.com> - 2018-11-24 23:36 +0100
    Re: New Linux crypto-miner steals your root password and disables your antivirus Nomen Nescio <nobody@dizum.com> - 2018-11-25 10:39 +0100

csiph-web