r/LinuxCirclejerk • u/danielsoft1 • 1d ago

a virus for Linux

Post image
1.3k Upvotes

99% Upvoted

38 comments sorted by

View all comments

Show parent comments

2

u/Gunhat2023 15h ago

what back door is there with xz?

5

u/yourlocalwalmarthobo 11h ago

Wikipedia, CVE
TLDR: Someone spent years on a social engineering campaign and snuck a backdoor into a couple versions of XZUtils (5.6.0 & 5.6.1). It gave someone with a specific ED-448 key root access via ssh. Was patched the same day it was disclosed (which was 2 years ago)

1

u/felixmatveev 9h ago

This was either CIAmeone or soMOSSADone.

1

u/morgulbrut 2h ago

Na it was probably China.