Chinese hackers have unleashed a never-before-seen Linux backdoor::SprySOCKS borrows from open source Windows malware and adds new tricks.

  • epyon22@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    34
    ·
    1 year ago

    CVE-2022-40684 An authentication bypass vulnerability in Fortinet FortiOS, FortiProxy and FortiSwitchManager

    CVE-2022-39952 An unauthenticated remote code execution (RCE) vulnerability in Fortinet FortiNAC

    CVE-2021-22205 An unauthenticated RCE vulnerability in GitLab CE/EE

    CVE-2019-18935 An unauthenticated remote code execution vulnerability in Progress Telerik UI for ASP.NET AJAX

    CVE-2019-9670 / CVE-2019-9621 A bundle of two vulnerabilities for unauthenticated RCE in Zimbra Collaboration Suite

    ProxyShell (CVE-2021-34473, CVE-2021-34523v, CVE-2021-31207) A set of three chained vulnerabilities that perform unauthenticated RCE in Microsoft Exchange

    • RaivoKulli@sopuli.xyz
      link
      fedilink
      English
      arrow-up
      36
      arrow-down
      1
      ·
      1 year ago

      Thanks. I read the article but (from my reading) they left out the most important part out: how it spreads and infects a machine. Sometimes they make a huge deal about a Linux backdoor and then it’s revealed right at the end (if at all) that it requires local access. Wah whaa. Now I have to scan every article to see what the actual method is.

      • Kecessa@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        5
        arrow-down
        2
        ·
        1 year ago

        That just means your need your man on the inside and considering we just had a situation where a Chinese asset was employed for the local power corporation, I don’t think it’s that much of an issue…

        • RaivoKulli@sopuli.xyz
          link
          fedilink
          English
          arrow-up
          13
          ·
          1 year ago

          I’m not going to be as worried that my personal stuff is getting hacked if it requires someone to actually visit me at home lol

          • Kecessa@sh.itjust.works
            link
            fedilink
            English
            arrow-up
            2
            ·
            1 year ago

            Your personal info is also stored in the bank’s computers, the government’s computers, your employer’s computers and so on…

            That’s where the person on the inside comes into play.

            • RaivoKulli@sopuli.xyz
              link
              fedilink
              English
              arrow-up
              4
              ·
              1 year ago

              Right but I don’t have to worry about my own computer is what I mean. Can’t do anything about bank or government computers anyway.