Re: linux trojan

["Bryan J. Smith" <b.j.smith@ieee.org>]

On Thu, 2005-03-24 at 16:51 -0600, Dan Fleischer wrote:
> Has anyone heard of this?:
> http://securityresponse.symantec.com/avcenter/venc/data/backdoor.dextenea.html

Yes, YARK (Yet Another Root Kit).

> Is this one of those things like the Redhat malware from last fall which
> duped the user into installing a package from an unknown source?

Yes, it's not self-replicating.
It's replicated 100% by social engineering.


-- 
Bryan J. Smith                                  b.j.smith@ieee.org 
---------------------------------------------------------------- 
Community software is all about choice, choice of technology.
Unfortunately, too many Linux advocates port over the so-called
"choice" from the commercial software world, brand name marketing.
The result is false assumptions, failure to focus on the real
technical similarities, but loyalty to blind vendor alignments.



-
To unsubscribe, send email to majordomo@silug.org with
"unsubscribe silug-discuss" in the body.