full-disclosure - [Ticket#: 200505251001607] [SECURITY] rootkit/IRCbot on server adrians.lx.ro

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <1117022874.17005.7756809815.66594.16@eomer.restena.lu>
Date: Wed May 25 14:11:43 2005
From: noc at restena.lu (RESTENA NOC)
Subject: [Ticket#: 200505251001607] [SECURITY]
 rootkit/IRCbot on server adrians.lx.ro

Dear Administrator of lx.ro, 
 
one of our customers has informed our staff that very 
recently an attack on one of his servers was performed 
that - after successfully gaining root rights - downloaded 
a malicious piece of software from the server 
 
adrians.lx.ro 
 
The exact file downloaded was: 
 
http://adrians.lx.ro/Robi.tar.gz 
 
and contains the psyBNC toolkit. This file is still 
present on that server. Please take the appropriate 
actions as soon as possible. 
 
Regards, 
 
RESTENA NOC 

 
---------------------------------------------------
Fondation RESTENA NOC
E-mail : noc@...tena.lu                                   
Tel.   : +352 42 44 09 1
Fax    : +352 42 24 73