Groups > comp.os.linux.advocacy > #165991

Re: SSHD rootkit heads up

From	owl <owl@rooftop.invalid>
Newsgroups	comp.os.linux.advocacy
Subject	Re: SSHD rootkit heads up
Date	2013-02-22 19:51 +0000
Organization	ok by me, so long as it doesn't get out of hand
Message-ID	<ekyt93.a00t4a@rooftop.invalid> (permalink)
References	<kg7m30$6su$1@dont-email.me>

Show all headers | View raw

Chris Ahlstrom <OFeem1987@teleworm.us> wrote:
>    https://isc.sans.edu/diary/SSHD+rootkit+in+the+wild/15229

>    SSHD rootkit in the wild
>    Published: 2013-02-21,
>    Last Updated: 2013-02-22 09:23:59 UTC

>    There are a lot of discussions at the moment about a SSHD rootkit
>    hitting mainly RPM based Linux distributions.
>    Thanks to our reader unSpawn, we received a bunch of samples of the
>    rootkit. The rootkit is actually a trojanized library that links with
>    SSHD and does *a lot* of nasty things to the system.

"chrisv" doesn't need to worry about this.

Back to comp.os.linux.advocacy | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

SSHD rootkit heads up Chris Ahlstrom <OFeem1987@teleworm.us> - 2013-02-22 06:51 -0500
  Re: SSHD rootkit heads up chrisv <chrisv@nospam.invalid> - 2013-02-22 09:29 -0600
  Re: SSHD rootkit heads up Lusotec <nomail@nomail.not> - 2013-02-22 16:22 +0000
    Re: SSHD rootkit heads up "Cola Zealot" <Cola_Zealot@fuckoff.com> - 2013-02-22 19:27 +0100
      Re: SSHD rootkit heads up JEDIDIAH <jedi@nomad.mishnet> - 2013-02-22 13:50 -0600
        Re: SSHD rootkit heads up DFS <nospam@dfs.com> - 2013-02-22 15:11 -0500
        Re: SSHD rootkit heads up Snit <usenet@gallopinginsanity.com> - 2013-02-22 21:11 -0700
      Re: SSHD rootkit heads up RayLopez99 <raylopez88@gmail.com> - 2013-02-22 16:07 -0800
    Proprietary software vulnerability causes rootkit injection Homer <usenet@slated.org> - 2013-02-23 03:57 +0000
      Re: Proprietary software vulnerability causes rootkit injection TomB <tommy.bongaerts@gmail.com> - 2013-02-23 06:46 +0000
        Re: Proprietary software vulnerability causes rootkit injection Snit <usenet@gallopinginsanity.com> - 2013-02-23 10:03 -0700
          Re: Proprietary software vulnerability causes rootkit injection TomB <tommy.bongaerts@gmail.com> - 2013-02-24 10:44 +0000
        No conclusive evidence as to what causes rootkit injection "Ezekiel" <zeke@nosuchemail.com> - 2013-02-23 18:05 -0500
          Re: No conclusive evidence as to what causes rootkit injection TomB <tommy.bongaerts@gmail.com> - 2013-02-24 10:26 +0000
            Re: No conclusive evidence as to what causes rootkit injection "Ezekiel" <zeke@nosuchemail.com> - 2013-02-24 08:29 -0500
      Re: Proprietary software vulnerability causes rootkit injection Snit <usenet@gallopinginsanity.com> - 2013-02-23 10:04 -0700
        Re: Proprietary software vulnerability causes rootkit injection "Cola Zealot" <Cola_Zealot@fuckoff.com> - 2013-02-23 22:39 +0100
          Re: Proprietary software vulnerability causes rootkit injection Snit <usenet@gallopinginsanity.com> - 2013-02-23 15:25 -0700
            Re: Proprietary software vulnerability causes rootkit injection "Cola Zealot" <Cola_Zealot@fuckoff.com> - 2013-02-24 11:34 +0100
              Re: Proprietary software vulnerability causes rootkit injection fuyang <cei@mail.huafeng.cma.gov.cn> - 2013-02-24 14:00 +0100
                Re: Linux vulnerability causes rootkit injection "Cola Zealot" <Cola_Zealot@fuckoff.com> - 2013-02-24 16:42 +0100
                Re: Linux vulnerability causes rootkit injection Hadron<hadronquark@gmail.com> - 2013-02-24 16:48 +0100
                Re: Linux vulnerability causes rootkit injection "Ezekiel" <zeke@nosuchemail.com> - 2013-02-24 10:55 -0500
                Re: Linux vulnerability causes rootkit injection GreyCloud <mist@cumulus.com> - 2013-02-24 09:34 -0700
                Re: Linux vulnerability causes rootkit injection Denis McMahon <denismfmcmahon@gmail.com> - 2013-03-07 05:45 +0000
                Re: Linux vulnerability causes rootkit injection Jim Beard <jdbeard@patriot.net> - 2013-03-07 10:05 -0500
                Re: Linux vulnerability causes rootkit injection William Poaster <wp@induh-vidual.net> - 2013-03-07 23:02 +0000
                Re: Linux vulnerability causes rootkit injection flatfish+++ <phlatphish@yahoo.com> - 2013-03-07 18:22 -0500
                Re: Linux vulnerability causes rootkit injection GreyCloud <mist@cumulus.com> - 2013-03-07 22:33 -0700
                Re: Someone else did, stupid jerk.  You aren't very bright. GreyCloud <mist@cumulus.com> - 2013-03-07 22:30 -0700
                Re: Linux vulnerability causes rootkit injection Hadron<hadronquark@gmail.com> - 2013-03-08 08:05 +0100
                Re: Linux vulnerability causes rootkit injection GreyCloud <mist@cumulus.com> - 2013-03-07 12:36 -0700
  Re: SSHD rootkit heads up TomB <tommy.bongaerts@gmail.com> - 2013-02-22 17:56 +0000
  Re: SSHD rootkit heads up owl <owl@rooftop.invalid> - 2013-02-22 19:51 +0000

csiph-web