ICT Security-Sécurité PC et Internet

Security researchers with Russian anti-virus company Doctor Web have examined a complex, multi-purpose backdoor for Linux. This malicious program can execute various commands issued by intruders such as to mount DDoS attacks and to perform a wide range of other malicious tasks.

Learn more:

- http://www.scoop.it/t/securite-pc-et-internet/?tag=Linux

GHOST is a serious vulnerability that has been discovered in the glibc library.

Here is what you need to know.

What is GHOST?
GHOST is a serious vulnerability that has been discovered in the glibc library.

What is the glibc?
It’s the GNU C Library, a key part of the Linux operating system. If you don’t have glibc, your Linux system is not going to work.

read more...

Learn more:

- http://www.scoop.it/t/securite-pc-et-internet/?tag=Linux

- http://www.scoop.it/t/securite-pc-et-internet/?tag=GHOST

Mitarbeiter des russischen Security-Software-Anbieters Doctor Web haben einen Linux-Trojaner entdeckt, der Denial-of-Service-Attacken in größerem Ausmaß starten kann. Den Schädling benannten sie mit Linux.BackDoor.Fgt.1.



Sobald er auf einem befallenen Gerät startet, prüft er erst einmal, ob es eine Internetverbindung gibt, indem er auf einen der Google-Server zugreift. Findet er keine, bleibt er ruhig, um nicht von verhaltensbasierenden Systemen erkannt zu werden. Ist die Verbindung erfolgreich, erfasst die Malware IP- und MAC-Adresse des infizierten Systems. Danach versucht sie, diese Informationen und Daten über die eigene Version an einen Steuer-Server zu senden.

Schließlich wartet Linux.BackDoor.Fgt.1 auf einen Datenblock, der einen auszuführenden Befehl enthält. Wenn vom Verwaltungsserver ein Ping-Befehl eintrifft, antwortet der Trojaner mit Pong und fährt mit seiner Mission fort. Beim Befehl DUP schließt er seine Arbeit ab.

Learn more:

- http://www.scoop.it/t/securite-pc-et-internet/?tag=Linux

La faille concerne l'un des programmes-clés de nombreuses versions de Linux et affecte un très grand nombre de serveurs Web et d'autres machines connectées.

Learn more:

- http://www.scoop.it/t/securite-pc-et-internet/?tag=Bash+Command+Flaw

This GnuTLS bug is worse than the big Apple "goto fail" bug patched last week.

Le ver Java.Tomdep a été spécialement créé pour cibler les serveurs Tomcat et infecte déjà une dizaine de pays.

 In May of this year, sophisticated attackers breached a large Internet hosting provider and gained access to internal administrative systems. The attackers appear to have been after customer record information such as usernames, emails, and passwords.

While these internal administrative systems had access to customer records, discovery of the attack and certain security implementations mitigated the scope of the breach. Customer passwords were accessible, but these passwords were hashed and salted making mass password cracking difficult. Customer financial information was also accessible, but encrypted. Unfortunately, access to the encryption key cannot be ruled out.

While breaches of organizations and mass customer record dumps are posted almost daily, this particular attack was more sophisticated than we have seen in the past.

Canonical, the lead developers of the Ubuntu Linux-based operating system, have admitted that its online forums were not just defaced this weekend, but also that hackers managed to steal every users' email address, password and username from the...

Canonical, the lead developers of the Ubuntu Linux-based operating system, have admitted that its online forums were not just defaced this weekend, but also that

===> hackers managed to steal every users’ email address, password and username from the Ubuntu Forums database. <===

A malware program designed for Linux systems, including embedded devices with ARM architecture, uses a sophisticated kernel rootkit that’s custom built for each infection.

The malware, known as XOR.DDoS, was first spotted in September by security research outfit Malware Must Die. However, it has since evolved and new versions were seen in the wild as recently as Jan. 20, according to a new report Thursday from security firm FireEye, which analyzed the threat in detail.

XOR.DDoS is installed on targeted systems via SSH (Secure Shell) brute-force attacks launched primarily from Internet Protocol (IP) addresses registered to a Hong Kong-based company called Hee Thai Limited.

The attacks attempt to guess the password for the root account by using different dictionary-based techniques and password lists from past data breaches. FireEye observed well over 20,000 SSH login attempts per targeted server within a 24-hour period and more than 1 million per server between mid-November and end of January.

Learn more:

- http://www.scoop.it/t/securite-pc-et-internet/?tag=Linux

Backdoor tied to espionage campaign that has targeted governments in 45 countries.

Researchers have uncovered an extremely stealthy trojan for Linux systems that attackers have been using to siphon sensitive data from governments and pharmaceutical companies around the world.

The previously undiscovered malware represents a missing puzzle piece tied to "Turla," a so-called advanced persistent threat (APT) disclosed in August by Kaspersky Lab and Symantec. For at least four years, the campaign targeted government institutions, embassies, military, education, research, and pharmaceutical companies in more than 45 countries. The unknown attackers—who are probably backed by a nation-state, according to Symantec—were known to have infected several hundred Windows-based computers by exploiting a variety of vulnerabilities, at least two of which were zero-day bugs. The malware was notable for its use of a rootkit that made it extremely hard to detect.

Learn more:

- http://www.scoop.it/t/securite-pc-et-internet/?tag=Linux

Apparently, the internet has more deep-seated security bugs to worry about than Heartbleed. Researchers have discovered a longstanding flaw in a common

Learn more:

- http://www.scoop.it/t/securite-pc-et-internet/?tag=Bash+Command+Flaw

Der meistgenutzte Webserver der Welt hat eine schwere Sicherheitslücke, über die Angreifer schädlichen Code aus der Ferne ausführen können. Alle aktuellen 2.x-Versionen des Open Source Servers sind betroffen.

Learn more:

- http://www.scoop.it/t/securite-pc-et-internet/?tag=Linux

- http://www.scoop.it/t/securite-pc-et-internet/?tag=Apache

During an investigation into how a breach occurred at a large internet hosting provider, researchers found a Linux backdoor capable of stealing login credentials from secure shell connections. 

===> The Fokirtor Trojan targets users of the Linux operating system. <===

Ubuntu Forums has been hacked.

As well as leaving behind an AK-waving penguin, the hackers also took away millions of usernames, email addresses and password hashes.