Linux systems under attack
There’s this article on ZDNet. It reports that recently, there has been allot of active attacks against Linux systems, using stolen SSH keys.
As the article explains, once inside the machine, the attacker uses local kernel exploits to gain root access so that a rootkit known as phalanx2 gets installed.
This type of attacks are probably related to the recent Debian random number generator bug. So read on to get more info on the subject.
