Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > alt.os.linux > #51786 > unrolled thread
| Started by | Nomen Nescio <noreply@mixnym.net> |
|---|---|
| First post | 2018-11-24 07:41 -0600 |
| Last post | 2018-11-25 10:39 +0100 |
| Articles | 6 — 5 participants |
Back to article view | Back to alt.os.linux
New Linux crypto-miner steals your root password and disables your antivirus Nomen Nescio <noreply@mixnym.net> - 2018-11-24 07:41 -0600
Re: New Linux crypto-miner steals your root password and disables your antivirus Bit Twister <BitTwister@mouse-potato.com> - 2018-11-24 08:53 -0600
Re: New Linux crypto-miner steals your root password and disables your antivirus "J.O. Aho" <user@example.net> - 2018-11-24 18:37 +0100
Re: New Linux crypto-miner steals your root password and disables your antivirus Jean-David Beyer <jeandavid8@verizon.net> - 2018-11-24 16:51 -0500
Re: New Linux crypto-miner steals your root password and disables your antivirus Nomen Nescio <nobody@dizum.com> - 2018-11-24 23:36 +0100
Re: New Linux crypto-miner steals your root password and disables your antivirus Nomen Nescio <nobody@dizum.com> - 2018-11-25 10:39 +0100
| From | Nomen Nescio <noreply@mixnym.net> |
|---|---|
| Date | 2018-11-24 07:41 -0600 |
| Subject | New Linux crypto-miner steals your root password and disables your antivirus |
| Message-ID | <ptbkdh$7jg$1@news.mixmin.net> |
<https://www.zdnet.com/article/new-linux-crypto-miner-steals-your-root-password-and-disables-your-antivirus/>
[toc] | [next] | [standalone]
| From | Bit Twister <BitTwister@mouse-potato.com> |
|---|---|
| Date | 2018-11-24 08:53 -0600 |
| Message-ID | <slrnpvipes.iu1.BitTwister@wb.home.test> |
| In reply to | #51786 |
On Sat, 24 Nov 2018 07:41:01 -0600, Nomen Nescio wrote: ><https://www.zdnet.com/article/new-linux-crypto-miner-steals-your-root-password-and-disables-your-antivirus/> Heheheh, look at the CVE -20xx dates. "Once the trojan has a foothold on the system it uses one of two privilege escalation exploits CVE-2016-5195 (also known as Dirty COW) and CVE-2013-2094 to get root permissions and have full access to the OS." Hopefully your system has the fixes that are more than a year old.
[toc] | [prev] | [next] | [standalone]
| From | "J.O. Aho" <user@example.net> |
|---|---|
| Date | 2018-11-24 18:37 +0100 |
| Message-ID | <g5tgjhFs1dmU1@mid.individual.net> |
| In reply to | #51789 |
On 11/24/18 3:53 PM, Bit Twister wrote: > On Sat, 24 Nov 2018 07:41:01 -0600, Nomen Nescio wrote: >> <https://www.zdnet.com/article/new-linux-crypto-miner-steals-your-root-password-and-disables-your-antivirus/> > > Heheheh, look at the CVE -20xx dates. > > "Once the trojan has a foothold on the system it uses one of two > privilege escalation exploits CVE-2016-5195 (also known as Dirty COW) > and CVE-2013-2094 to get root permissions and have full access to the OS." > > Hopefully your system has the fixes that are more than a year old. It also needs an unpatched kernel that is version 3.8.8 or less, which you maybe can find on quite old android phones. -- //Aho
[toc] | [prev] | [next] | [standalone]
| From | Jean-David Beyer <jeandavid8@verizon.net> |
|---|---|
| Date | 2018-11-24 16:51 -0500 |
| Message-ID | <ptch5u0951@news2.newsguy.com> |
| In reply to | #51791 |
On 11/24/18 12:37 PM, J.O. Aho wrote: > On 11/24/18 3:53 PM, Bit Twister wrote: >> On Sat, 24 Nov 2018 07:41:01 -0600, Nomen Nescio wrote: >>> <https://www.zdnet.com/article/new-linux-crypto-miner-steals-your-root-password-and-disables-your-antivirus/> >> >> Heheheh, look at the CVE -20xx dates. >> >> "Once the trojan has a foothold on the system it uses one of two >> privilege escalation exploits CVE-2016-5195 (also known as Dirty COW) >> and CVE-2013-2094 to get root permissions and have full access to the OS." >> >> Hopefully your system has the fixes that are more than a year old. > > It also needs an unpatched kernel that is version 3.8.8 or less, which > you maybe can find on quite old android phones. > Mine is Sep 18 10:32 vmlinuz-2.6.32-754.6.3.el6.x86_64 that was updated about two months ago. You can see by its file name that it has had an awful lot of backport security fixes from Red Hat. -- .~. Jean-David Beyer Registered Linux User 85642. /V\ PGP-Key:166D840A 0C610C8B Registered Machine 1935521. /( )\ Shrewsbury, New Jersey http://linuxcounter.net ^^-^^ 16:45:01 up 46 days, 1:28, 2 users, load average: 4.68, 4.70, 4.62
[toc] | [prev] | [next] | [standalone]
| From | Nomen Nescio <nobody@dizum.com> |
|---|---|
| Date | 2018-11-24 23:36 +0100 |
| Message-ID | <9210b1defb206f7b7295888c53b4ad46@dizum.com> |
| In reply to | #51786 |
In article <ptbkdh$7jg$1@news.mixmin.net> Nomen Nescio <noreply@mixnym.net> wrote: > > <https://www.zdnet.com/article/new-linux-crypto-miner-steals-your-root-password-and-disables-your-antivirus/> But but what about Windoze?
[toc] | [prev] | [next] | [standalone]
| From | Nomen Nescio <nobody@dizum.com> |
|---|---|
| Date | 2018-11-25 10:39 +0100 |
| Message-ID | <90dd34a34862d0e4f4a032edbaf3b80a@dizum.com> |
| In reply to | #51795 |
In article <9210b1defb206f7b7295888c53b4ad46@dizum.com> Nomen Nescio <nobody@dizum.com> wrote: > > In article <ptbkdh$7jg$1@news.mixmin.net> > Nomen Nescio <noreply@mixnym.net> wrote: > > > > <https://www.zdnet.com/article/new-linux-crypto-miner-steals-your-root-password-and-disables-your-antivirus/> > > But but what about Windoze? No, Windows is impervious.
[toc] | [prev] | [standalone]
Back to top | Article view | alt.os.linux
csiph-web