Stay Ahead With Linux Security News

OpenSSHbackdoor attackLinux exploit

New Mining Campaign Targets Linux And IoT Devices With Backdoor Attack

Internet-facing Linux systems and Internet of Things (IoT) devices are being targeted as part of a new campaign designed to illicitly mine cryptocurrency. "The threat actors behind the attack use a backdoor that deploys a wide array of tools and components such as rootkits and an IRC bot to steal device resources for mining operations," Microsoft threat intelligence researcher Rotem Sde-Or said . . "The backdoor also installs a patched version of OpenSSH on affected devices, allowing threat actors to hijack SSH credentials, move laterally within the network, and conceal malicious SSH connections." To pull off the scheme, misconfigured Linux hosts are brute-forced to gain initial access, following which the threat actors move to disable shell history and fetch a trojanized version of OpenSSH from a remote server. The rogue OpenSSH package is configured to install and launch the backdoor, a shell script that allows the attackers to distribute additional payloads and conduct other post-exploitation activities. The link for this article located at The Hacker News is no longer available. . A fresh initiative focuses on exploiting Linux and IoT systems to mine digital currency through unauthorized access and breach of SSH protocols.. Cryptocurrency Mining, Linux Security Threats, IoT Exploits, OpenSSH Backdoor, Cybersecurity Awareness. . Brittany Day

Jun 26, 2023 • Brittany Day IoT Security