Your one-stop web resource providing safety and security information to manufacturers

Hackers broke into the Linux project website,, and made off with root access to a server known as Hera and ultimately compromised “a number of servers in the infrastructure,” according to a note on the website.

Administrators of the website learned of the problem Sunday and soon discovered bad things were happening on their servers. Attackers modified files, added a malicious program to the server’s startup scripts and logged some user data.

Compromised Sites Distributing Trojan
A Trojan Distribution Network
ZeuS Spin Off Hits Cyber Street
For Sale: Trojan to Go’s owners have contacted law enforcement in the U.S. and Europe and are in the process of reinstalling the site’s infrastructure and figuring out what happened.

They think the hackers may have stolen a user’s login credentials to break into the system, and the site is making each of its 448 users change their passwords and SSH (Secure Shell) keys.

Schneider Bold

This intrusion is a problem because is the place where Linux distributors download source code for the operating system’s kernel. But’s note said, even with root access, it would be difficult for a hacker to slip malicious source code into the Linux kernel. That’s because Linux’s change-tracking system takes a cryptographic hash of each published file.

So once a component of the Linux kernel publishes on, “it is not possible to change the old versions without it being noticed,” the note said.

In January, servers used by the Fedora project — the community version of Red Hat Enterprise Linux – suffered a hack attack. Around the same time another open-source software development site called SourceForge also fell victim to an intrusion.

Pin It on Pinterest

Share This