News for hackers. Stuff that matters.
Re:Ongoing malware attack targeting Apache hijacks 20,000 sites by vxxzy on Tuesday April 02, 2013 @12:27PM (#5480288)
I've read that it may have entered through various control panels (Webmin, cPanel, Plesk). I found more info here: http://malwaremustdie.blogspot.com/2013/03/the-evil-came-bac...
Re:Ongoing malware attack targeting Apache hijacks 20,000 sites by SwellJoe on Tuesday April 02, 2013 @02:14PM (#5481081)
We are unaware of any current exploits in Webmin related to this, and I don't think we've had any reports of infected users, so far. That is not to say there aren't currently unknown exploits in Webmin, just that the correlation seems somewhat weak at the moment. And, of course, there have been exploitable conditions in Webmin in the past (the last major remote exploit was many years ago, however; most recent stuff has been XSS variants which would be pretty difficult to exploit, and were not seen in the wild, to my knowledge).