Re:Analysis of the Linux backdoor used in Freenode IRC netwo...
by nitrogen on Tuesday October 14, 2014 @12:40PM
(#8454261)
A better explanation is provided down-thread on the article's comments page. The author comments are overly laden with PR-ese, but there's not much you can do with MD5 hashes of files that are customized per system anyway. Since this rootkit modifies system files and doesn't alter the kernel to hide itself, standard rootkit detection tools will find it.
[ Parent
| on HN ]
There are no comments on this comment yet.