Hacker tries to compromise and resell an internet-facing Linux server
1–10 of 73 posts
Re: Hacker tries to compromise and resell an internet-facing Linux server
#2This was amusing. I like imagining new attackers taking over the infected machines and running their own VPS service on top of the hacked VPS accounts. You could have poorly secured turtles all the way down.
Re: Hacker tries to compromise and resell an internet-facing Linux server
#3So... the attacker accessed the server of a security consultant by "bruteforcing a username and password combination"...
EDIT: Security newb here. It was a honeypot, aka a trap.
Re: Hacker tries to compromise and resell an internet-facing Linux server
#4I wonder if Huthos is offering a SLA for their VPS :)
Re: Hacker tries to compromise and resell an internet-facing Linux server
#5All of this is outside my experience, so I have to ask - how does the attack, as described, prove HutHos is the perpetrator?
The poster was able to find the HutHos site owner's full information "in a few minutes", due to "poor operational security practices." Doesn't this raise the possibility that the HutHos server was compromised by the malware's true owner?
Re: Hacker tries to compromise and resell an internet-facing Linux server
#6So... the attacker accessed the server of a security consultant by "bruteforcing a username and password combination"... EDIT: Security newb here. It was a honeypot, aka a trap.
It appears to be a honeypot server, which is why it is so heavily monitored. It wouldn't do much good if it was really hard to get into.
Re: Hacker tries to compromise and resell an internet-facing Linux server
#7So... the attacker accessed the server of a security consultant by "bruteforcing a username and password combination"... EDIT: Security newb here. It was a honeypot, aka a trap.
[deleted]
Re: Hacker tries to compromise and resell an internet-facing Linux server
#8So... the attacker accessed the server of a security consultant by "bruteforcing a username and password combination"... EDIT: Security newb here. It was a honeypot, aka a trap.
I think that was left on purpose (he was also logging everything)
Re: Hacker tries to compromise and resell an internet-facing Linux server
#9Absolutely fascinating. I've been "in and around" the security community (not a part of) for years now, and never heard of a company offering a service like this.
I love how he gives advise to the company at the end. I mean c'mon you get root access via dictionary attack within a quick timeframe and you don't think it is a honeypot?
Re: Hacker tries to compromise and resell an internet-facing Linux server
#10So... the attacker accessed the server of a security consultant by "bruteforcing a username and password combination"... EDIT: Security newb here. It was a honeypot, aka a trap.
Not “the server”, the attacker logged into a honeypot, see http://en.wikipedia.org/wiki/Honeypot_%28computing%29