Slashdot is powered by your submissions, so send in your scoop


Forgot your password?
Check out the new SourceForge HTML5 internet speed test! No Flash necessary and runs on all devices. ×

Submission + - Trojanized SSH daemon in the wild (

An anonymous reader writes: It is no secret the SSH binaries can be backdoored. It is nonetheless interesting to see analysis of real cases where trojanized version of the daemon are found in the wild. In this case, the binary not only lets the attacker log onto the server if he has a hardcoded password, the attacker is also granted access if he/she has the right SSH key. The backdoor also logs all username and passwords to exfiltrate them to a server hosted in Iceland.
This discussion was created for logged-in users only, but now has been archived. No new comments can be posted.

Trojanized SSH daemon in the wild

Comments Filter:

"The algorithm to do that is extremely nasty. You might want to mug someone with it." -- M. Devine, Computer Science 340