4 ms·
Dunno how stealthy this is given that masses of base-64 garbage you didn't put into a crontab seems like a pretty big red flag.
by yborg 5y ago
Dunno how stealthy this is given that masses of base-64 garbage you didn't put into a crontab seems like a pretty big red flag.
- tyingq 5y agoI think the idea is that various Linux endpoint protection products don't look there.
- cyberCleve 5y agoThat seems like an obvious oversight. This is a well known and widely used malware technique. https://attack.mitre.org/techniques/T1053/003/ https://attack.mitre.org/techniques/T1053/003/
- tata71 5y agoWhen's the last time you checked yours, before this story?