Do you have SSH enabled on the machine that runs your bitcoin node? Know the risks.
https://arstechnica.com/security/2024/05/ssh-backdoor-has-infected-400000-linux-servers-over-15-years-and-keeps-on-spreading/
This malware:
- Profited off of compromised bitcoin nodes
- Also stole credit card numbers
- Was able to bypass egress firewalls
- Exploited weak passwords (among other things)
Dr. Hax
npub16v8…eqha
2024-05-15 21:12:18
Author Public Key
npub16v82nr4xt62nlydtj0mtxr49r6enc5r0sl2f7cq2zwdw7q92j5gs8meqhaPublished at
2024-05-15 21:12:18Event JSON
{
"id": "12248a819b25112de40e90ebae81c3a7c00996c992a474c1f2a7564fe5e6be3e",
"pubkey": "d30ea98ea65e953f91ab93f6b30ea51eb33c506f87d49f600a139aef00aa9511",
"created_at": 1715800338,
"kind": 1,
"tags": [
[
"r",
"https://arstechnica.com/security/2024/05/ssh-backdoor-has-infected-400000-linux-servers-over-15-years-and-keeps-on-spreading/"
]
],
"content": "Do you have SSH enabled on the machine that runs your bitcoin node? Know the risks.\n\nhttps://arstechnica.com/security/2024/05/ssh-backdoor-has-infected-400000-linux-servers-over-15-years-and-keeps-on-spreading/\n\nThis malware:\n- Profited off of compromised bitcoin nodes\n- Also stole credit card numbers\n- Was able to bypass egress firewalls\n- Exploited weak passwords (among other things)",
"sig": "8f92b4a59f34ea50557788edbe6cd590bf83b027913e23b28db268a6dd7a9789656c40d7139cdb88c77552437acb6221b5a6a53c5bca37a6dbddb778454b816f"
}