Operation Windigo: 10,000 infected Linux servers redirecting half a million visitors to malware
Security firm ESET has published a technical analysis on Linux/Ebury, an OpenSSH backdoor and credential stealer the company discovered last month. Thousands of victims have been notified that their servers were infected, and the details being released today are in an effort to raise further awareness. Dubbed Operation Windigo, the scheme runs on an infrastructure entirely hosted on compromised computers: 25,000 Linux servers in total over the last two years, with over 10,000 still infected today. The numbers are significant, as ESET points out, if you remember each of these systems have access to significant bandwidth, storage, computing power, and...
This story continues at The Next Webhttp://feeds.feedburner.com/~ff/TheN...hg:D7DqB2pKExk http://feeds.feedburner.com/~ff/TheN...?d=yIl2AUoC8zA http://feeds.feedburner.com/~ff/TheN...hg:V_sGLiPBpWU
http://feeds.feedburner.com/~r/TheNe...~4/-dJJ53c4V6k