On Sun, 03 May 2015 12:33:43 -0600
jd1008 <jd1008(a)gmail.com> wrote:
Has anyone else seen this: Unnoticed for years, malware turned Linux
and BSD servers into spamming machines
http://www.net-security.org/malware_news.php?id=3030
freebsd-questions(a)freebsd.orgmailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
So I asked:
More importantly, how do we disinfect? Reinstall the system?
But the infiltration was done to a freshly installed system.
We need to know what filenames are involved!!
Perhaps I misread, but this exploit is only possible by installing an
infected piece of software. A spam mailer. So, if you haven't
installed the cracked or commercial version of their software, you are
not infected or vulnerable to infection.
The method used was ingenious. A clever someone had a lot of time on
his hands. And the forensic effort that discovered and documented this
was impressive. Hats off to them!
I don't see a defense against such exploits as long as people can
install software on their systems. The alternative is Mac on steroids,
only the software that big brother approves of and allows you to use.