Compromised SSH Keys Lead to Linux Rootkit Attack
Submitted
by
Tech Groupie
Tech Groupie writes "The U.S. Computer Emergency Readiness Team (CERT) has issued a warning for what it calls "active attacks" against Linux-based computing infrastructures using compromised SSH keys. The attack appears to initially use stolen SSH keys to gain access to a system, and then uses local kernel exploits to gain root access. Once root access has been obtained, a rootkit known as "phalanx2" is installed,"
Compromised SSH Keys Lead to Linux Rootkit Attack More Login
Compromised SSH Keys Lead to Linux Rootkit Attack