from the bad-childhoods-keep-on-giving dept.
Tech Groupie writes "The US Computer Emergency Readiness Team (CERT) has issued a warning for what it calls 'active attacks' against Linux-based computing infrastructures using compromised SSH keys. The attack appears to initially use stolen SSH keys to gain access to a system, and then uses local kernel exploits to gain root access. Once root access has been obtained, a rootkit known as 'phalanx2' is installed."
Gosh that takes me back... or is it forward? That's the trouble with
time travel, you never can tell."
-- Doctor Who, "Androids of Tara"