New malware targets Linux and Mac OS X

cirrus · 2012-09-03 19:11:28

http://www.techspot.com/news/50009-new- … -os-x.html
pacman -S iptables shorewall
then to block the malware as root do
iptables -A INPUT -s 212.7.208.65 -j DROP
iptables -A OUTPUT -d 212.7.208.65 -j DROP

cfr · 2012-09-04 00:24:31

Why not just make sure WIFIADAPT isn't sitting in your home directory?

How exactly is this thing supposed to install and run without the user's knowledge?

I don't see that shorewall is required to block as you suggest. I could perfectly easily install those rules with just iptables.

Note, too, that those rules won't block the malware, what they are designed to do as I understand it is to stop the installed malware from communicating with the server. What I don't understand is why the advice is not to delete the malware. I could understand installing those rules as a precaution in case you later get infected and don't notice. But if as the article says you suspect you are already infected, why not delete the thing if it is really sitting in your home directory like that?

Arch Linux

#1 2012-09-03 19:11:28

New malware targets Linux and Mac OS X

#2 2012-09-04 00:24:31

Re: New malware targets Linux and Mac OS X

Board footer