SSH Key-based Attacks

Home » Windows & System Security » Security News and Software Updates &... » SSH Key-based Attacks

Rate Topic

Display Mode

Topic Options

Author

Message

RichieUK

Posted 8/27/2008 2:44 AM

Senior Forum Moderator

Group: Moderators
Last Login: 8/9/2008 10:14 AM
Posts: 29,030, Visits: 54,734

US-CERT is aware of active attacks against linux-based computing infrastructures using compromised SSH keys. The attack appears to initially use stolen SSH keys to gain access to a system, and then uses local kernel exploits to gain root access. Once root access has been obtained, a rootkit known as "phalanx2" is installed.

US-CERT.gov

________________________________________

ASAP & UNITE member since 2006

Post #243550

« Prev Topic | Next Topic »

Reading This Topic

All times are GMT -6:00, Time now is 10:31pm