Technology

59358 readers

6668 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related content.
Be excellent to each another!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, to ask if your bot can be added please contact us.
Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago

MODERATORS

188

Stealthy Linux rootkit found in the wild after going undetected for 2 years (arstechnica.com)

submitted 11 months ago by L4s@lemmy.world to c/technology@lemmy.world

23 comments fedilink hide all child comments

Stealthy Linux rootkit found in the wild after going undetected for 2 years::Krasue infects telecom firms in Thailand using techniques for staying under the radar.

you are viewing a single comment's thread
view the rest of the comments

[–] raspberriesareyummy@lemmy.world 89 points 11 months ago* (last edited 11 months ago) (2 children)

Zero useful info: what is the attack vector / vulnerability exploited? Without that info, this is useless

[–] anamethatisnt@lemmy.world 60 points 11 months ago* (last edited 11 months ago) (2 children)

Well, most of us can relax I believe: The rootkit supports Linux Kernel versions are 2.6x/3.10.x
https://www.bleepingcomputer.com/news/security/krasue-rat-malware-hides-on-linux-servers-using-embedded-rootkits/

[–] KSPAtlas@sopuli.xyz 28 points 11 months ago (1 children)

The only thing I know runs that kernel version is my Wii because it needs an old kernel for ppc32 support

[–] registrert@lemmy.sambands.net 41 points 11 months ago

Be careful, one day you'll boot it up only to find some hacker have set new and impossible to beat highscores.

[–] raspberriesareyummy@lemmy.world 2 points 11 months ago

Now that is helpful information - current distros being on 6.x and whatnot... Thanks!

[–] randy@lemmy.ca 29 points 11 months ago (1 children)

From the article:

The researchers have so far been unable to determine precisely how Krasue gets installed.

So no one knows yet. But I feel that the existence of malware in the wild is newsworthy, even if we don't know how it got there. Regardless, you and I probably don't have to worry about it unless you're a Thai telecom.

[–] raspberriesareyummy@lemmy.world 1 points 11 months ago

And unless we run a 3.x kernel as another commentor pointed out...