Linux Trojan Discovered! (Linux/Bckdr-RKC)

[grandpaflo]

Linux Trojan: Linux/Bckdr-RKC 02-2012
- http://pastebin.com/DwtX9dMd


Contains a detailed discovery process by an individual and a Sophos disinfecting solution.

 

[Chiefcrowe]

Very interesting, i wonder if it will have much impact?

 

[Slugbait]

Very interesting, i wonder if it will have much impact?

Probably will. It's designed to crack the root password of an SSH server, then will conduct reconnaissance or disrupt communications as instructed of the network that it has compromised. It's of Chinese origin.

Original variant was discovered back in November. Which is interesting timing...Jester beta-tested Saladin in December, which also cracks the root password, except Saladin was designed as a seek-n-destroy tool...not an espionage tool. Hmmm.

 

[Nigelmdl]

Interesting I also forwarded this information to a friend of mine who is working in the fedora group here in Belgium.