Re:Running a fake power plant on the internet for a month
by justinclift on Saturday January 16, 2021 @01:45PM
(#25804308)
Ahhhh. Hadn't thought of the ransomware aspect at all, but it's a good point. ;)
With NetBackup (and probably other "Enterprise Backup" software too) the NetBackup master servers have ~root level access to pretty much every server in an Enterprise. Or at least, every server being backed up. Which is likely to be everything important. ;)
NetBackup master servers also have the capability to run commands (as root) remotely on systems-they-back-up, and have those commands not be logged by the auditing on the systems (or anywhere really).
To my mind, that seems like a handy thing for hackers to target. ;)
With NetBackup (and probably other "Enterprise Backup" software too) the NetBackup master servers have ~root level access to pretty much every server in an Enterprise. Or at least, every server being backed up. Which is likely to be everything important. ;)
NetBackup master servers also have the capability to run commands (as root) remotely on systems-they-back-up, and have those commands not be logged by the auditing on the systems (or anywhere really).
To my mind, that seems like a handy thing for hackers to target. ;)