3 ms·
No information on how it spreads? "Once launched with administrator privileges, the Trojan loads into the memory of its process files containing cybercriminals
by tux3 11y ago
No information on how it spreads?
"Once launched with administrator privileges, the Trojan loads into the memory of its process files containing cybercriminals' demands"
This sounds like it needs to run as root, is there any vulnerability involved and do I need to patch things?
Is it just a particularly crazy spam campaign that would somehow trick "website administrators" into running malware as root on their servers?
- raverbashing 11y agoI would guess it's privilege escalation (or that it logs in as a user and only affects that user's files)
- hjek 11y agoAccording to Dr. Web, it spreads through USB disks and the internet, and Dr. Web has great solution to that problem: "Dr.Web Office Control access restriction system: Restricts or completely prohibits access to Internet resources and removable devices, and therefore, excludes the possibility of a virus invading via those sources." "Users should only have access to the local resources they require to perform their jobs. It's no use trying to convince staff that flash drives are dangerous. It is much easier to centrally disable access to such devices."
- the_mitsuhiko 11y ago> No information on how it spreads? If they are clever they would attack via wordpress and other systems that are unpatched and give shell access.
- the_mitsuhiko 11y ago> No information on how it spreads? If they are clever they would attack via wordpress and other systems that are unpatched and give shell access.
- tajen 11y agoOn one hand there are many open source software that are installed by piping a file into sudo; on the other the upside of open source is the ability to trace who tricked you into running that command.
- enginnr 11y ago"Once launched with administrator privileges" which is very difficult unless the soft goes out of its way to ask, and most open source software doesn't ask