Risk Assessment / Security & Hacktivism New backdoor worm found attacking websites running Apache To

[Old Man]

Main reason for me bringing this up, is that we have something here which is targeting Linux and Mac OS X (as well as Windows); Linux is something we need to watch for with ever increasing frequency.


"Researchers have identified new self-replicating malware that infects computers running the Apache Tomcat Web server with a backdoor that can be used to attack other machines."

Article:
http://arstechnica.com/security/2013/11/new-backdoor-worm-found-attacking-websites-running-apache-tomcat/

 

[Dunks]

Ok, thanks.

 

[[FnG]magnolia]

Like I'm going to click your RSS link/feed which you've set up with the BACKDOOR WORM HIDDEN IN IT YOU MONSTER

 

[ci_newman]

Thanks?

 

[Deleted member 651465]

I'm interested in your thoughts about it, not some link-and-run

 

[KIA]

Tomdep-infected machines also seek out other servers running Apache Tomcat and attempt to log in to them using commonly used combinations of user names and passwords. When the credentials match, Tomdep gets installed on another machine.

Super advanced malware.

 

[memyselfandi]

Looking at the article linked to from the OPs link it tries logging onto other instances found using common username: password combinations such as admin:admin, admin: password and root:root (amongst others given).

Frankly if you are using combinations such as these you deserve all you get as a learning experience ...

 

[Narj]

Like I'm going to click your RSS link/feed which you've set up with the BACKDOOR WORM HIDDEN IN IT YOU MONSTER

I certainly don't want anything worming its way into my back door.