3 ms·
5000 Servers. A "Senior Engineer" discovered this script. Probably it was a cron job or something which they review regularly? Would be useful to know how exac
by blinkingled 16y ago
5000 Servers. A "Senior Engineer" discovered this script. Probably it was a cron job or something which they review regularly?
Would be useful to know how exactly they got to that one script. Must have real good review practices , audits and logging in place if they were able to find it before it did the damage and then collect evidence to trace it back to the perpetrator.
- btn 16y agoAccording to an article about the indictment, it was discovered by chance: "It was only by chance that [the Fannie Mae engineer] scrolled down to the bottom of the legitimate script to discover the malicious script" http://www.computerworld.com/s/article/9127040/Fannie_Mae_engineer_indicted_for_planting_server_bomb http://www.computerworld.com/s/article/9127040/Fannie_Mae_en...
- pedanticfreak 16y agoMore detail from the above article: [quote] If the malicious script had gone undiscovered, it would have disabled monitoring alerts and all log-ins, deleted the root passwords to the approximately 4,000 Fannie Mae servers, then erased all data and backup data on those servers by overwriting with zeros. "Finally, this script would power off all servers, disabling the ability to remotely turn on a server," said the government's complaint. "Subsequently, the only way to turn the servers back on was physically getting to a data center." [/quote]