The ssh -G test no longer works since -G is a legitimate option since OpenSSH 6.8 See https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=796599, https://www.openssh.com/txt/release-6.8, and https://github.com/eset/malware-ioc/tree/master/windigo. The last link gives other methods of determining if you are infected.

Meanwhile, I highly recommend using key-based authentication for ssh (and disabling password authentication), as well as a firewall.

Reply via email to