Slashdot Mirror

← Back to Stories (view on slashdot.org)

Compromised SSH Keys Lead To Linux Rootkit Attack

Posted by timothy on from the bad-childhoods-keep-on-giving dept.

Tech Groupie writes "The US Computer Emergency Readiness Team (CERT) has issued a warning for what it calls 'active attacks' against Linux-based computing infrastructures using compromised SSH keys. The attack appears to initially use stolen SSH keys to gain access to a system, and then uses local kernel exploits to gain root access. Once root access has been obtained, a rootkit known as 'phalanx2' is installed."

3 of 79 comments (clear)

  1. GNAA & Debian by Jizzbug · · Score: 0, Offtopic

    Last year's Debian Project Leader, Sam Hocevar, is a senior member of the Gay Nigger Association of America. Sam can be found, along with several Pakistani terrorists, on IRC in #gnaa on NiggerNET (SSL on irc.gnaa.us port 6697).

    See here:

    http://commons.wikimedia.org/wiki/Image:Gnaa-logo.png

    Not only does the GNAA seek to destroy Slashdot and Wikipedia (honorable goals), but they are very experienced with using botnets for fun and profit.

    NEVAR 4GET: The Aliens come from France!

    --

    -=/\- Jizzbug -/\=-
  2. Re:GNAA & Debian (Offtopic WHAT?) by Jizzbug · · Score: 0, Offtopic

    How is Debian being led by a GNAA member off-topic?!

    Let me spell out the scenario for you:

    "Hello, I'm Sam Hocevar. You might remember from such movies as Gayniggers From Outer Space. I am running for Debian Project Leader. I am from France. I work for the GNAA, we sell botnets to Russian gangsters."

    A year later...

    "Somehow a predictable pseudo-random number generator crept into our SSL/SSH packages, and Debian boxen can now be taken over by botnets. We are working to remedy the situation. My name is Sam Hocevar, and I approve this message."

    Now do you get it? See how on-topic that is?

    Hey! Who WOULDN'T trust their operating systems to botnet operators??!?

    --

    -=/\- Jizzbug -/\=-
  3. Re:Debian & the GNAA [NOT OFFTOPIC] by Jizzbug · · Score: 0, Offtopic

    The GNAA is a hacker group that runs botnets.

    Only lamers and trolls think GNAA is a trolling group. (All hackers are trolls, but not all trolls are hackers. Put that in your Venn Diagram and smoke it!)

    Wake up, retards!! DURRR

    "Hello, my name is Sam Hocevar, I run botnets and Debian."

    --

    -=/\- Jizzbug -/\=-