Re: debian7 compromised (rk)

2013-07-21 Thread Scott Edwards
On Fri, Jul 12, 2013 at 7:04 PM, Security wrote: > Hi all snip... Today I done a backup of this script that contains a huge list of server > compromised. Later I re-install whole system. > > Can be usuful send this rk? > If the regular tools do not find it, file bugs against them (or even fil

debian7 compromised (rk)

2013-07-12 Thread Security
Hi all :-) First of all sorry for my english. 2 day ago a hacker crow (BALUARI TEAM) with brute forces programs has compromised my debian 7, changes root password and installed a rootkit. last root pts/031.14.106.154Mon Jul 1 12:28 - 12:28 (00:00) root pts/031.14.10