From owner-freebsd-questions@FreeBSD.ORG Sun May 3 18:24:31 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id F3032253 for ; Sun, 3 May 2015 18:24:31 +0000 (UTC) Received: from mail-qg0-x22b.google.com (mail-qg0-x22b.google.com [IPv6:2607:f8b0:400d:c04::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id ABDD41917 for ; Sun, 3 May 2015 18:24:31 +0000 (UTC) Received: by qgej70 with SMTP id j70so57240468qge.2 for ; Sun, 03 May 2015 11:24:30 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:subject:references :in-reply-to:content-type:content-transfer-encoding; bh=JqK4o6iIGysW9tMrioczvEON2kvgPoNVu/BInfQ3ZEw=; b=G6nuJmtJ8zAcYAA/KwqmoaSOHA3fErHzTdOtGzgniLXv3y2u1T128chmBEaTUAimR3 SSSmNfBitppYaeFnRu2Xea6DODCivUqs+ntflYyLewiLuNyW/AWi46hsM3GGkd7kOItX YEppmdwQehGPQkshUPob2nmXTxmgok5cyylCBdqsNSk4EvAsvp9ENm+I8sSaYJscp1b1 UcqBor08zee4sDfxY0axkAuWFPyWmoPsDeNfybt+9/tQS9KnUicjRZGORC0GdSrhVlRy I2jiSME3VujMuC9FW9D6sYZve5bFu2AMy/DRf4LWhozI8spgSbPuF5UMsKD+6ak9YdYh Mb+w== X-Received: by 10.55.15.15 with SMTP id z15mr38195432qkg.21.1430677470710; Sun, 03 May 2015 11:24:30 -0700 (PDT) Received: from localhost.localdomain ([209.181.150.218]) by mx.google.com with ESMTPSA id 13sm8069236qku.20.2015.05.03.11.24.29 for (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Sun, 03 May 2015 11:24:29 -0700 (PDT) Message-ID: <554667B9.2050205@gmail.com> Date: Sun, 03 May 2015 12:23:53 -0600 From: jd1008 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.6.0 MIME-Version: 1.0 To: freebsd-questions@freebsd.org Subject: Re: Unnoticed for years, malware turned Linux and BSD servers into spamming machines References: <20150503123824.3faeca9e@seibercom.net> In-Reply-To: Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 03 May 2015 18:24:32 -0000 On 05/03/2015 10:40 AM, Kurt Buff wrote: > Yawn. > > Download trojaned binaries, get hacked. > > Kurt > > On Sun, May 3, 2015 at 9:38 AM, Jerry wrote: >> Has anyone else seen this: >> >> Unnoticed for years, malware turned Linux and BSD servers into spamming machines >> >> http://www.net-security.org/malware_news.php?id=3030 >> _______________________________________________ >> More importantly, how do we disinfect? Reinstall the system? But the infiltration was done to a freshly installed system. We need to know what filenames are involved!!