Security Incidents mailing list archives
Re: A friend's cable modem Linux machine just got compromised
From: "William N. Zanatta" <william () veritel com br>
Date: Thu, 02 May 2002 10:12:45 -0300
I'll take my guess: Beastkit. Following, there is an analysis of a RH 7.2 compromised box, take a look there and compare your friend's system.
http://cert.uni-stuttgart.de/forensics/rootkits/beastkit.en.php William Zanatta-=[ "When you know Slackware you know Linux. When you know Red Hat, all you know is Red Hat" ]=-
---------------------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service.For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com
Current thread:
- A friend's cable modem Linux machine just got compromised Sam Trenholme (May 01)
- Re: A friend's cable modem Linux machine just got compromised Jason Robertson (May 01)
- Re: A friend's cable modem Linux machine just got compromised Sam Trenholme (May 02)
- Re: A friend's cable modem Linux machine just got compromised William N. Zanatta (May 02)
- Re: A friend's cable modem Linux machine just got compromised Jason Robertson (May 01)