Message-ID:

"One lawyer can steal more than a hundred men with guns." -- The Godfather

computers / alt.os.linux / Re: Linux devices are under attack by a never-before-seen worm

Re: Linux devices are under attack by a never-before-seen worm

<uofon9$3ik25$1@dont-email.me>

https://news.novabbs.org/computers/article-flat.php?id=3126&group=alt.os.linux#3126

Path: i2pn2.org!i2pn.org!news.samoylyk.net!weretis.net!feeder8.news.weretis.net!eternal-september.org!feeder3.eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: suzyw0ng@outlook.com (Woozy Song)
Newsgroups: alt.os.linux
Subject: Re: Linux devices are under attack by a never-before-seen worm
Date: Sat, 20 Jan 2024 14:20:21 +0800
Organization: A noiseless patient Spider
Lines: 11
Message-ID: <uofon9$3ik25$1@dont-email.me>
References: <MPG.400e30d25ac560be989789@news.eternal-september.org>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Injection-Date: Sat, 20 Jan 2024 06:20:25 -0000 (UTC)
Injection-Info: dont-email.me; posting-host="58128cea8591773f8e9bd643128266e2";
logging-data="3756101"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX19zOYldIpzXBR/4mvU96OEvDjJp7SxZYA8="
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101
Firefox/91.0 SeaMonkey/2.53.18
Cancel-Lock: sha1:KionGuxkN223f7fa+3cUs1SHuFY=
In-Reply-To: <MPG.400e30d25ac560be989789@news.eternal-september.org>

by: Woozy Song - Sat, 20 Jan 2024 06:20 UTC

Nothing wrote:
>
> Linux devices are under attack by a never-before-seen worm
>
> <https://arstechnica.com/security/2024/01/a-previously-
> unknown-worm-has-been-stealthily-targeting-linux-devices-
> for-a-year/>
>

I can't see the point of running crypto-miner on a webcam or other IOT
device. Maybe if you can sneak it onto a Xeon/Epyc.

Re: Linux devices are under attack by a never-before-seen worm

<l11m3aFejpgU1@mid.individual.net>

copy mid

https://news.novabbs.org/computers/article-flat.php?id=3127&group=alt.os.linux#3127

copy link Newsgroups: alt.os.linux

Path: i2pn2.org!rocksolid2!news.neodome.net!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From: user@example.net (J.O. Aho)
Newsgroups: alt.os.linux
Subject: Re: Linux devices are under attack by a never-before-seen worm
Date: Sat, 20 Jan 2024 11:37:30 +0100
Lines: 22
Message-ID: <l11m3aFejpgU1@mid.individual.net>
References: <MPG.400e30d25ac560be989789@news.eternal-september.org>
<uofon9$3ik25$1@dont-email.me>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
X-Trace: individual.net kfuiaNgoPu9bvA7BlTh1KQoExMDXgOAtwKP94uO50ZdjcKnf/3
Cancel-Lock: sha1:G8D0EN3hqh8YkEBGJVcaF/p9S10= sha256:nLyDDlItUxsJ/Cdj8Tctae/Fa85XEq2qXVj5bvskKkI=
User-Agent: Mozilla Thunderbird
Content-Language: en-US-large
In-Reply-To: <uofon9$3ik25$1@dont-email.me>

by: J.O. Aho - Sat, 20 Jan 2024 10:37 UTC

On 20/01/2024 07:20, Woozy Song wrote:
> Nothing wrote:
>>
>> Linux devices are under attack by a never-before-seen worm
>>
>> <https://arstechnica.com/security/2024/01/a-previously-
>> unknown-worm-has-been-stealthily-targeting-linux-devices-
>> for-a-year/>
>>
>
> I can't see the point of running crypto-miner on a webcam or other IOT
> device. Maybe if you can sneak it onto a Xeon/Epyc.

They mine in pools, so each device is just working on a small part and a
lot of low cpu cameras will manage to mine as much as a high end
desktop, but far less risk of someone discovers what you are doing as in
general people tend to not update firmware as they should and then on
top of that no one runs any av-software or root-kit detectors on IoT
devices.

--
//Aho

Subject	Author
Re: Linux devices are under attack by a never-before-seen worm	Woozy Song
Re: Linux devices are under attack by a never-before-seen worm	J.O. Aho