PSA: Improperly Secured Linux Servers Targeted with Chaos Backdoor

itman · Feb 23, 2018

Hackers are using SSH brute-force attacks to take over Linux systems secured with weak passwords and are deploying a backdoor named Chaos.

Attacks with this malware have been spotted since June, last year. They have been recently documented and broken down in a GoSecure report.

Chaos rooted in 2013 sebd rootkit

According to GoSecure experts, the backdoor isn't actually new and was one of the components of the "sebd" Linux rootkit that saw limited use in 2013 and was later dumped as a free download on HackForums.

It now appears that someone extracted the backdoor from the sebd rootkit source code, has renamed it to "Chaos," and is now using it as the first-stage payload in attacks on Linux servers.
Click to expand...

https://www.bleepingcomputer.com/ne...d-linux-servers-targeted-with-chaos-backdoor/

Log in or Sign up

PSA: Improperly Secured Linux Servers Targeted with Chaos Backdoor

itman Registered Member

Log in or Sign up

PSA: Improperly Secured Linux Servers Targeted with Chaos Backdoor

itman Registered Member

Useful Searches