Linux devices are under attack by a never-before-seen worm (arstechnica.com)
from mozz@mbin.grits.dev to technology@lemmy.ml on 11 Jan 2024 02:31
https://mbin.grits.dev/m/technology@lemmy.ml/t/2016

Based on Mirai malware, self-replicating NoaBot installs cryptomining app on infected devices.

#technology

threaded - newest

flambonkscious@sh.itjust.works on 11 Jan 2024 05:36 next collapse

Akamai has published an extensive library of indicators that people can use to check for signs of NoaBot on their devices (github.com/akamai/…/main)

GCs those Akamai folks…

randomperson@lemmy.today on 11 Jan 2024 05:47 next collapse

What does GC stand for? www.acronymfinder.com/Slang/GC.html

LanternEverywhere@kbin.social on 11 Jan 2024 05:54 next collapse
sir_pronoun@lemmy.world on 11 Jan 2024 08:10 next collapse

In this context i’m going with Game Chick from that list, because none make sense to me.

flambonkscious@sh.itjust.works on 11 Jan 2024 11:41 next collapse

Good cunts - it’s originally an Aussie term of endearment, as far as I’m aware

spongeborgcubepants@lemmy.world on 11 Jan 2024 11:47 next collapse

Garbage Collection

massive_bereavement@kbin.social on 11 Jan 2024 12:25 next collapse

Game Cube

reflex@kbin.social on 11 Jan 2024 13:25 collapse

What does GC stand for?

Girthy Cocks maybe?
As a compliment, u noe?
Like saying they have Balls of Steel.

randomperson@lemmy.today on 11 Jan 2024 05:52 collapse

here’s a link to the script. its nothing fancy, but makes it easy to check: github.com/akamai/…/noabot_detect.sh

reflex@kbin.social on 11 Jan 2024 06:09 collapse

here’s a link to the script.

"MagicPussy" doesn't sound that bad. 😏

LodeMike@lemmy.today on 11 Jan 2024 08:07 next collapse

the NoaBot targets weak passwords connecting SSH connections.

Harden your configs people.

AllowUsers is a really goood one.

SeeJayEmm@lemmy.procrastinati.org on 11 Jan 2024 12:52 collapse

Or just don’t allow password auth at all.

jose1324@lemmy.world on 11 Jan 2024 13:17 collapse

Or just have a good password

SeeJayEmm@lemmy.procrastinati.org on 11 Jan 2024 13:33 collapse

If we’re going to play that game. Require an Ed25519 key with a strong password.

lemmyng@lemmy.ca on 11 Jan 2024 13:37 next collapse

Or ed25519-sk.

mozz@mbin.grits.dev on 11 Jan 2024 13:39 collapse

<img alt="https://imgs.xkcd.com/comics/security.png" src="https://xkcd.com/538/">

(In this case the "wrench" is just breaking into some weak link that isn't ssh, once your password is strong to not be a weak link)

digdilem@lemmy.ml on 11 Jan 2024 20:15 next collapse

Very poor title, like someone’s just got their “Big Book of Clickbait”

Everything is under attack all the time, and everything is never-before-seen until it’s seen.

UnfortunateShort@lemmy.world on 12 Jan 2024 01:50 collapse

I love how in security, we have gone from “use strong passwords” to “don’t make your own passwords”, because people will just refuse to learn.