cPGuard Update Channel Hijacked to Backdoor Linux Servers and Collect Password Hashes
· thehackernews.com · popularity 20/100 · 0 similar stories today · Internet, Telecom & Networking (Technology & Consumer Electronics)
Read the original at thehackernews.com →
Summary
An attacker broke into the update system of the cPGuard security tool on November 2 and used it to send a malicious script to customers' Linux servers. The script installed a backdoor and collected password hashes and other sensitive files from servers that ran it, cPGuard maker OPSSHIELD said in an advisory. The attacker has since taken some of that data. cPGuard 5.88.25 and later versions
Found in: The Hacker News. Rating basis: single outlet; outlet tier 2 (unlisted); 1 feeds; feed position 6.