ssh backdoor

[trinidad]

Any news about this leak? I haven't found a fix as yet in Ubuntu.

https://dbts-analytics.com/sshbackdoor.html

TC

[LL-user]

Thanks, TC, for the reminder of this concerning malware.

For anyone who's not familiar with Ebury, one of the most advanced server-side malware campaigns, here is a good start.

TC, I had a look at your screenshots. Could you please explain, what you're trying to do? Am must be missing something.
To my knowledge the command is run like this:

Code:

ssh -G <host>

Without the <host> part it will fail (as shown on your screenshots) and therefore print "System infected" according to your following conditions.