UNSUSCRIBE
___
systemd-devel mailing list
[email protected]
https://lists.freedesktop.org/mailman/listinfo/systemd-devel
The attacker is a robot trying to copy a *.service to
/etc/systemd/services. This single measure may keep me in business.
Thanks for the information.
On Sun, Jun 13, 2021 at 11:45 AM Silvio Knizek wrote:
> Am Sonntag, dem 13.06.2021 um 10:49 -0400 schrieb Saint Michael:
> > This is no
:32 -0400 schrieb Saint Michael:
> > One of the most dramatic hacks to 50+ servers of mine is a bitcoin
> > miner, xmrig. It installs a service file at /etc/systemd/system,
> > enables it and kills the machine.
> > Nobody knows how it propagates. I think that SSHD has been brok
One of the most dramatic hacks to 50+ servers of mine is a bitcoin miner,
xmrig. It installs a service file at /etc/systemd/system, enables it and
kills the machine.
Nobody knows how it propagates. I think that SSHD has been broken in a
foreign land or they just brute-force any machine where
passwo