be careful ! windigo is here - Airtime Security Discussions on Sourcefabric Forum

Albert FR

A worm make a lot of ravage
test your installation
command line :

ssh
-G 2>&1 | grep -e illegal -e unknown > /dev/null &&
echo “Système OK !” || echo “Système infected by Windigo”

Daniel James

Hi Albert, it's not really clear from the report at http://www.welivesecurity.com/2014/02/21/an-in-depth-analysis-of-linuxebury/ how the modified ssh library is supposed to get on the system. The user must be tricked into installing an unsigned package, I presume.

Always use secure apt and repositories that you trust, folks! :-)

Cheers!

Daniel

Howdy, Stranger!

Categories

Poll

Top Posters