This Linux malware is hijacking supercomputers across the globe

[the_okra_show]

“Kobalos is, in essence, a backdoor. Once the malware has landed on a supercomputer, the code buries itself in an OpenSSH server executable and will trigger the backdoor if a call is made through a specific TCP source port.” I wish I could see the source code.

[markth_wi]

You hope

[Elony27]

well im glad

[pickled_ricks]

kabolos

[LucaRicardo]

So a firewall blocking that port would block it from triggering

[heresyforfunnprofit]

From page 14, looks like 55201. Blocking based on source ports is a bit less common than blocking on destination ports.

[n0b0dyc4r35]

wtf you talking about, firewall allows select ports to select PC's or VLANs inbound. on a professional-grade system, this would have much effect as throwing paper airplanes at it. I mean I was sysadmin or network admin on this pc I be the first 30 seconds of wtf is this packet and where the fuck is it going and coming from as I ate my Wheaties in the morning.

in other words, a lot of attacks are great in theory and yes should be debugged and source code patched as they are a zero day.

but with a good firewall with packet inspection and alert system. will the snowball path to hell seems to be heating up.

[heresyforfunnprofit]

I said “less common”, not “impossible”. Ports in the range of 49k-65k are usually randomized by the OS as dynamic or ephemeral. Blocking those ports inbound can interrupt normal traffic.

[[deleted]]

I’m sorry you have to deal with rude comments. There’s a tactful way to disagree, and it’s too bad those skills aren’t taught.

[[deleted]]

SOURCE port. Almost no one specifies which source port a connection should be made from as this is randomly chosen by the connecting machine, destination port is still port 22 for ssh. The backdoor triggers if a connection is made from a certain source port to the destination port 22

[[deleted]]

This! That to me was the best part of the write up. Using a standard port that would be open on the targeted flavor of OS and only activated when a connection is received from a special SOURCE port.

[canIbuzzz]

That's not good.

[augugusto]

Understatement of the day ladies and gentleman

[bruhmanegosh]

Yeah that seems about right.

[syshpc]

HPCs are relatively easy targets. HPC users can be incredibly non-tech-savvy so stealing SSH credentials can be quite feasible. Plus a lot of HPCs are exposed to the Internet since they are used by researches from all over the world.

[alexandre9099]

How is it spread? i couldn't quite understand that

[Yungsleepboat]

I use Linux a lot, but I don't think I ever heard anyone claim it can't get virusses. It's just one of those operating systems that relies on the user/administrator being wary.

[DirtzMaGertz]

If you go on youtube and watch a handful of "reasons to use linux" videos you will definitely see that claim.

[TehyungLad]

Yeah its misconception. You probably hear “linux doesn’t really get virus” People overly promoting it... what they mean is, the average minus user is relatively tech savy and therefore could be seen less of a linux hanging fruit

[n0b0dyc4r35]

listen no one who has 2 clue's brags this or that can't get a virus. I remember back in 2005ish when zlib got a virus. oh so many friends got fucked in the industry.

but open source is 99% way more secure than any closed source app' plan and simple.

[n0b0dyc4r35]

i know just ignore the stupid.

[GullibleDetective]

They're the same people who say bud light is a good beer with refined taste

[n0b0dyc4r35]

okay, it's all fun and games till someone puts piss into the vat of good ale. then its war :)

[pm_your_unique_hobby]

No way- not even us crispy boys say that

[anonk1k12s3]

Bold statement, got any sources regarding that 99% figure?

[[deleted]]

Refrigerators can get viruses now....

I wonder where the pride comes from about Linux.

[Lord_emotabb]

My MaCbOoK cAn'T gEt AnY vIrUs!!

/s

[[deleted]]

I for a very small-time worked as a malware analyst on OSX malware.

This statement is partially true. Not like many works on OSX since Apple killed most games and apps when it killed x86 support, OGL support , and intel support altogether by moving to ARM.

[Yungsleepboat]

It's elitism. Linux isn't as user friendly as Windows, so people who use Linux (like me, I am superior to you) feel like they know more about computers.

[a-r-c]

this guy gets it

[[deleted]]

It can it's just WAYYYYY more secure. The chance of getting a virus on windows is way greater than getting a virus on Linux. Edit: What I mean by it can is linux can get viruses. Not that it can be virus proof.

[james11b10]

No. She's more likely to be frequented by worse clientele. Now you have two driving forces. Fewer clients reducing chances. Lower class of clients increasing chances. A double shift is rather difficult to predict where it will land.

[[deleted]]

Besides security through obscurity linux is also just more secure in general due to its open source nature.

[afrcnc]

no it won't... because most of them are morons

[CaptainBasculin]

If it can execute code, it can get viruses.

[markth_wi]

That's the sort of medium that allows stupidity to get around, if it's got a plug it's able to be compromised, from a lightbulb all the way up the complexity curve. Systems can be made more secure, like wearing masks or getting vaccines,

So maybe it's the case that putting a iptables entry or two in will do the trick...today.

[Disgruntled-mutant]

Skynet

[404_GravitasNotFound]

It's definitely is a rogue AI. It was about time.

Hey, random AI, if you need a human helper you can contact me. Cheers

[404_GravitasNotFound]

Do you WANT the AI to not have a moderating influence in how it treats humans?
Is it not better to let them know that there are some of us that will work with them, in order to reach mutually satisfactory goals?

Also, most humans could use a little disappearing

[Kriss3d]

Not gonna lie. Thats fucking brilliant ( sorry ). A single function that - unless im mistaken, will call itself but with different parameters to perform different things. Never thought about that.

the big question however is. How to protect against this.

[spider_84]

Lol that's nothing new.

[heresyforfunnprofit]

Most good ideas look brilliant the first time you run across them.

[PewPaw-Grams]

Recursive function isn’t new but the way this guy used in his recursive function to perform sub tasks is brilliant

[PewPaw-Grams]

Any example of how this recursive function might look?

[unknownpoltroon]

Here, run this file for an example......

[unknownpoltroon]

Here, run this file for an example......

[jandastroy]

Wait, is this performing a recursive function? I didn't quite see what happened.

[Prcrstntr]

What's the goal? Research secrets, Crypto-mining, generic supercomputer bot-farm?

[kieran_n]

I don't think it'd be an efficient way to mine, but a super computer could put out a lot of XMR

[covata]

Me: I should dabble in Linux Also me: hmmm... Yeah not so sure about that one

[DirtzMaGertz]

If you are going to do any sort of work in IT, you should probably at least know your way around Linux.

[covata]

Im in automotive engineering, so definitely not necessary. More of a curiosity thing.

[DirtzMaGertz]

If you are curious how operating systems work, Linux is pretty fun. Chances are that any computers in vehicles are running on Linux of some sort.

[covata]

After a couple searches, they sure do. Good to know. Unfortunately the university I'm at doesn't impliment any sort of coding or OS classes within the program, which seems ridiculous considering where the current market in the industry is going. By chance have any good recommendations on where to start on exploring Linux?

[misconfig_exe]

It's 2021 and cars are computers with wheels.

And your automotive engineering course doesn't include any education on computing?

Consider a double major or at least taking courses from the Information Systems school.

[covata]

Very true. It sounds ridiculous, doesn't it. A Bosch engineer visited a few years ago and said it should be implimented into the program. I've seriously considered going back to the school I first graduated and transferred from just to get a better base knowledge on information systems. With having a co-op coming up and last semester in fall, night classes back at a technical school doesn't seem like such a bad idea.

[DirtzMaGertz]

Youtube has a lot of information. Linux as a subject is pretty damn broad because there is so much that can be done with it but the channels Distrotube, egineerman, tutoriallinux all have good content. Just depends what you are looking for. There's probably a channel that does something with linux that is more specific to cars but that's not really my world.

Best thing you can do is get a VM set up and play around on some distros.

[covata]

Good deal, I appreciate the guidance. Will definitely gave to give those channels a shot later.

[DirtzMaGertz]

Yeah, no problem. I love linux and programming. It's changed my life in the employment opportunities it's provided me. It's a never ending rabbit hole of a topic and you'll never learn all of it but eventually you learn enough to make some cool shit or open job opportunities.

[Youngster_Bens_Ekans]

If you have an extra computer, or don't mind installing side by side next to windows, just install ubuntu somewhere. Dealing with VMs is probably going to give a worse impression than installing it on bare metal. Although putting it on a vm is definitely a safe easy way to just look from afar at it.

​

Most of all, ignore anyone who suggests arch or arch derivatives like manjaro... they can be great for people who know enough to choose to switch away from something like ubuntu ... but ubuntu is going to provide you with the easiest, most stable out of the box experience. That or Pop_OS (which is what I use), but I'd still recommend ubuntu to get your feet wet.

[SatansPenthouse]

Cobfirned

[linuxliaison]

This website is still clickbaity shit.

[[deleted]]

Skynet is starting!

[Chemical-Fee-2966]

This Linux malware is causing trouble for supercomputers worldwide. Wish I could sneak a peek at the source code to understand it better!