Re: brute force ssh attack

From: Matthew Miller (mattdm_at_mattdm.org)
Date: 04/29/05

  • Next message: Bogdan Rotariu: "ACPI wont work with fc2,fc3"
    Date: Fri, 29 Apr 2005 08:48:10 -0400
    To: For users of Fedora Core releases <fedora-list@redhat.com>
    
    

    On Fri, Apr 29, 2005 at 11:57:24AM +0100, Nigel Wade wrote:
    > It was completely manual, the virus didn't install itself. It was injected
    > by someone breaking in via ssh and then manually downloading an infected
    > file. It's not like a STD, it's like a virus which can only be spread by
    > direct injection.

    That's the difference between a virus and a worm. It *does* have a mechanism
    to spread between files on a machine, but doesn't have one to go between
    machines without piggybacking on something else. (Which it did.)

    > >Where are you getting your "0-49" number from?
    > That's the number of infections quoted by Symantec.

    Okay. Well, given that this is the second one in the wild I've seen, my
    guess is that it's significantly higher than their guess. It's still not
    widespread, but it'd be quite the freak of statistics if two of those 50
    worldwide were cases I saw.

    -- 
    Matthew Miller           mattdm@mattdm.org        <http://www.mattdm.org/>
    Boston University Linux      ------>                <http://linux.bu.edu/>
    Current office temperature: 72 degrees Fahrenheit.
    -- 
    fedora-list mailing list
    fedora-list@redhat.com
    To unsubscribe: http://www.redhat.com/mailman/listinfo/fedora-list
    

  • Next message: Bogdan Rotariu: "ACPI wont work with fc2,fc3"

    Relevant Pages

    • Re: Glassification Targeting Information
      ... >>coming down with the virus all at one time and in one place, ... >15th case of human infection with the H5N1 avian influenza virus. ... >infections following close contact with diseased birds. ... >I thought perhaps Abdul Qadeer Khan had trained in the USA, ...
      (misc.survivalism)
    • Re: Just when you think youd seen it all.....
      ... I had a system from a friend that had almost 200 ... virus infections not counting the spyware, ... E-mail from a relative and click on the virus attachment. ...
      (alt.sys.pc-clone.dell)
    • Re: Sorta On Topic - Future Virus Problems...
      ... Computer users have been warned for years about virus threats from ... cybersecurity official who now runs the security research group SANS ... digital picture frame to surprise his 81-year-old mother for her ... Consumers can protect themselves from most factory-loaded infections ...
      (rec.woodworking)
    • Re: I hate Windows 2000...... loosing my hair over this
      ... > Download the program that will get rid of 35 or more of the most common ... > Let's go do an online Virus Scan ... > When you get to the end print the infections and files it finds. ... Download and install it. ...
      (microsoft.public.win2000.general)
    • Re: I hate Windows 2000...... loosing my hair over this
      ... cable you're always on unless shutdown or have the cable modem on standby). ... Download the program that will get rid of 35 or more of the most common infections. ... Let's go do an online Virus Scan ...
      (microsoft.public.win2000.general)