3 ms·
> 1016 cd ~; chattr -ia .ssh; lockr -ia .ssh Does anyone know what the "lockr" command is? I can't find any references to it besides people saying they observe
by josephcsible 2y ago
> 1016 cd ~; chattr -ia .ssh; lockr -ia .ssh
Does anyone know what the "lockr" command is? I can't find any references to it besides people saying they observed malware trying to run it, usually (as is the case here) right after a chattr command with the same arguments.
- Kikawala 2y agohttps://www.lockr.io/ https://www.lockr.io/
- josephcsible 2y agoI think that's something totally unrelated that just happens to have the same name. I don't see anything in their docs that even hints at a UNIX command called "lockr", let alone one that makes sense to call like that.
- ars 2y agohttps://blog.netlab.360.com/icnanker-trojan-downloader-shc-en/ https://blog.netlab.360.com/icnanker-trojan-downloader-shc-e... has: cp -f /usr/bin/chattr /usr/bin/lockr