Vulnerability that lets hackers SSH into Linux devices is under active exploitation
摘要
研究人员报告称，黑客正在积极利用一个近期发现的高危漏洞，该漏洞允许攻击者登录许多Linux系统上的特权账户。该漏洞源于OpenSSH与musl代码库之间的交互，满足特定条件的Linux系统可在数秒内被未授权访问高权限账户。安全公司Greynoise表示，其在东南亚的蜜罐已遭到其追踪为GT10的团伙攻击，该团伙实施了成熟的入侵，其使用的后门包含中文注释，疑似由
Hackers are actively exploiting a recently discovered critical vulnerability that allows them to log in to privileged accounts on many Linux systems, multiple researchers are reporting.
The vulnerability, tracked under the name *sshole, arises from the interaction between OpenSSH and a code library known as musl. Linux systems that use both of these packages and meet certain other requirements can be hacked to give unauthenticated access to high-privilege accounts in a matter of seconds. *sshole became publicly known last Thursday and quickly stoked concerns it could lead to widespread compromise of Linux machines. Four days later, the prediction shows signs of becoming real.
Attackers conducting "mature intrusions"
Security firm Greynoise said Monday that honeypots it maintains in Southeast Asia have come under attack by a group it’s tracking as GT10. The group conducted “mature intrusions" into the systems, which Greynoise uses to detect attempted or successful attacks in real time. Greynoise subsequently gained access to a GT10 server that revealed potential other victims and some of the tools used in the campaign. A backdoor the group is using in the attacks contains Chinese language comments and appears to be generated with the use of AI.
转载信息
评论 (0)
暂无评论，来留下第一条评论吧