I got a message from the unix system guys that this is what happened:

The hackers replaced our version of the ssh/slogin/scp programs on piglet
with their own versions.  Those versions were logging login names and
passwords as our users connected to other machines.


----=============**=============----
      Henry Wu
      ACITS Help Desk
      Senior Student Associate
      UT Austin
----=============**=============----

On Thu, 24 Sep 1998, christ wrote:

> >> of course, if you ssh'd into piglet in the last 5 months, you'll need
> >> to change any passwords you used during the session as they got hacked
> >> and it took them 5 months to discover that a trojan version was running.
> >
> >     And they never announced this? When did they find out?
> 
> no clue.  i got word thru the grapevine yesterday.  i got no mail about
> anything altho i have most definitely used ssh to and from piglet.  thank-
> fully i think i abstained from su'ing during that time, but the incompetence
> is boggling.
> ---------------------------------------------------------------------------
> Send administrative requests to [EMAIL PROTECTED]
> 

---------------------------------------------------------------------------
Send administrative requests to [EMAIL PROTECTED]

Reply via email to