This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

New Multipurpose Linux Server Trojan

Does anyone know how quickly Astaro covers significant threats like this one?
Link

From SlashDot
A new multi-purpose Linux Trojan that opens a backdoor on the target machine and can make it participate in DDoS attacks has been discovered and analyzed by Dr. Web researchers, who believe that the Chinese hacker group ChinaZ might be behind it. "First, Linux.BackDoor.Xnote.1 sends information about the infected system to the server. It then goes into standby mode and awaits further instructions. If the command involves carrying out some task, the backdoor creates a separate process that establishes its own connection to the server through which it gets all the necessary configuration data and sends the results of the executed task," the researchers explained.


This thread was automatically locked due to age.
Parents
  • No one should have "Any" in 'Allowed Networks' for Shell Access.  This exploit should not be a problem for correctly-configured UTMs.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • No one should have "Any" in 'Allowed Networks' for Shell Access.  This exploit should not be a problem for correctly-configured UTMs.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
No Data