Re: Malware find in the news: xz related.

On 2024-04-01 16:03, Rich wrote:

Carlos E.R. <robin_listas@es.invalid> wrote:

On 2024-03-31 23:37, Richard Kettlewell wrote:

Incredibly good luck that it was spotted before it was too widely
deployed. Or bad luck if you were the originator l-)

>
I saw a post (es.comp.os.linux.redes) of someone in which the sshd
had weird peaks of high cpu (40%)

 The individual who discovered the backdoor was doing some kind of
performance testing of PostgreSQL.  Because of that they were
monitoring their system's processe's usage and noticed unusual CPU
usage from sshd.  When they started digging into why sshd was spiking
CPU usage (because it was messing with their PostgreSQL performance
monitoring) they discovered the sshd backdoor.

No, I mean that it has been seen in the wild.
When the thread I mentioned appeared, we knew nothing of the vulnerability, it was March 21st.
--
Cheers, Carlos.