Source |
Checkpoint |
Identifiant |
263799 |
Date de publication |
2015-10-20 15:30:46 (vue: 2015-10-20 15:30:46) |
Titre |
Digging for Groundhogs: Holes in Your Linux Server |
Texte |
In July 2015, Check Point's Incident Response team was contacted by a customer after they noticed strange file system activities occurring in one of their Linux based DNS BIND servers. This strange behavior consisted of a large number of peculiar files being written into sensitive system directories. A thorough analysis of the infected system […]
|
Envoyé |
Oui |
Condensat |
2015 activities after analysis appeared based behavior being bind blog check consisted contacted customer digging directories dns file files first groundhogs: holes incident infected july large linux noticed number occurring one peculiar point post response sensitive server servers strange system team thorough written your |
Tags |
|
Stories |
|
Notes |
|
Move |
|