3 ms·
Can anyone summarize what the attack vector is? Fake repositories? Bad maintainers? Fake tutorials?
by ddtaylor 7y ago
Can anyone summarize what the attack vector is? Fake repositories? Bad maintainers? Fake tutorials?
- jorangreef 7y agoA shell script with an SH extension, possibly (my guess) delivered as an email attachment. The article does not provide details, but does list a few steps to the exploit, the first being Linux users (as opposed to Linux servers) with poor antivirus. For example, ZIP email attachments can contain extension-less files with the executable bit set. This would be one easy way of getting the initial payload bootstrapped.
- deleted 7y ago[deleted]