News for hackers. Stuff that matters.

A comment on Ongoing malware attack targeting Apache hijacks 20,000 sites. Parent comment

Re:Ongoing malware attack targeting Apache hijacks 20,000 sites by afreak on Tuesday April 02, 2013 @12:27PM (#5480286)
If I had to guess, it might be related to this: http://www.cloudlinux.com/blog/clnews/sshd-exploit.php

The details on that page are weak and there are all sorts of problems with the content in general (namely asking users to run a script blindly), but it seems to mimic what is described.

[ Parent | on HN ]
Re:Ongoing malware attack targeting Apache hijacks 20,000 sites by devicenull on Tuesday April 02, 2013 @02:20PM (#5481123)
It's very disappointing that they didn't bother to update that news article. The actual source of that "exploit" was compromised admin machines. Everyone that kept having their servers hacked was found to have a rootkit on their local machine. I would not be surprised if this new "exploit" was the same thing.
[ Parent | on HN ]