Re: [MBZ] Linux webserver botnet pushes malware

2009-09-14 Thread Walt Zarnoch
The infected machines/vm's were probably behind on software updates. Linux still has that fatal flaw called the user, if the user doesn't update when a bug is found and patched, then the system stays vulnerable. In all, what probably happened was a service on the servers was vulnerable in some

Re: [MBZ] Linux webserver botnet pushes malware

2009-09-14 Thread Loren Faeth
My point exactly. Every OS is vulnerable in some way. (Many ways) You tried to worm out by saying the malware was not a virus. THen you went on to say they probably installed a rootkit. It is malware, and malware is malware, whether some piece of it is legit or not. Linux is vulnerable

Re: [MBZ] Linux webserver botnet pushes malware

2009-09-14 Thread Walt Zarnoch
I didn't try to worm-out of it, I was just correcting the article's mistake in saying that the webserver that was installed was mallware. It was just the means of putting the malware on the net. When I said they rooted the box, I was referring to gaining access to the root account, analogous to

Re: [MBZ] Linux webserver botnet pushes malware

2009-09-14 Thread Loren Faeth
You are technically right. But for most of us the distinction between malware and software used to install malware is a distinction without a meaningful difference. Nice explanation. I bestow on you one of my highly coveted detail awards otherwise known as the anal retentive award. It is

Re: [MBZ] Linux webserver botnet pushes malware

2009-09-14 Thread Rich Thomas
As Scott McNealy once said at a large gathering of Lotus folks 10 or 11 years ago, There is no privacy any more. Get over it. So, I got over it and no longer worry about it. --R Loren Faeth wrote: You are technically right. But for most of us the distinction between malware and software

Re: [MBZ] Linux webserver botnet pushes malware

2009-09-13 Thread Loren Faeth
Uh, Wonko, what was that about no virus on linux. We all know it is invincible because it is open source... RIGHT! WHO IS THIS REALLY? (Noah) At 03:23 PM 9/12/2009, you wrote: Attack of the open source zombies ... A security researcher has

[MBZ] Linux webserver botnet pushes malware

2009-09-12 Thread archer
Attack of the open source zombies ... A security researcher has discovered a cluster of infected Linux servers that have been corralled into a special ops botnet of sorts and used to distribute malware to unwitting people browsing the web. Each of the