Wikileaks reveals CIA's BothanSpy: exfiltrating SSH keys and passwds (Linux/Win)

Posted by tgragnato on Thursday July 06, 2017 @05:57AM
from the wikileaks.org dept.

( 1 comment | 5 points | on HN )

Re:Wikileaks reveals CIA's BothanSpy: exfiltrating SSH keys ... by chinarulezzz on Friday July 07, 2017 @09:44AM (#14718240)

Gyrfalcon has a very primitive attack methods: LD_PRELOAD (omg!) and ptrace (see linux/Documentation/security/Yama.txt).

If this is a CIA level, then it's very sad.

[ Parent | on HN ]