4 ms·
Since I'm a bit late to the party and feeling somewhat overwhelmed by the multitude of articles floating around, I wonder: Has there been any detailed analysis
by xurukefi 3y ago
Since I'm a bit late to the party and feeling somewhat overwhelmed by the multitude of articles floating around, I wonder: Has there been any detailed analysis of the actual injected object file? Thus far, I haven't come across any, which strikes me as rather peculiar given that it's been a few days.
- lenerdenator 3y agoI agree, I haven't seen anything about decompiling the object file. If I had a project to develop a backdoor to keep persistent access to whatever machine I wanted, it would make sense that I would have a plug-in executable that I would use for multiple backdoors. That's just decent engineering.
- tithe 3y agoYour best bet may be in the chat (from https://www.openwall.com/lists/oss-security/2024/03/30/26 https://www.openwall.com/lists/oss-security/2024/03/30/26 ): Matrix: #xz-backdoor-reversing:nil.im IRC: #xz-backdoor-reversing on irc.oftc.net Discord: https://discord.gg/XqTshWbR5F https://discord.gg/XqTshWbR5F