Guess the intruder wasn't completely convinced that chmod works the first time around
Yeah, that was weird. Any ideas why the multiple executions occurred?
He wanted to make sure it was really chmoded.
Hacker tries to compromise and resell an internet-facing Linux server
71–73 of 73 posts
Re: Hacker tries to compromise and resell an internet-facing Linux server
#72Absolutely fascinating. I've been "in and around" the security community (not a part of) for years now, and never heard of a company offering a service like this. I love how he gives advise to the company at the end. I mean c'mon you get root access via dictionary attack within a quick timeframe and you don't think it is a honeypot?
Sadly, there are still plenty of real servers that badly secured.
Re: Hacker tries to compromise and resell an internet-facing Linux server
#73the "/script/" directory is "secured" by some shoddy "password protector" script that points to some other...shoddy facebook page.
Huthos could simply be an innocent clueless bystander in a larger compromise situation.