Word Up! You must login or signup first!

alden @birchboy Interesting note on the #xz backdoor: If you plot Jai Tan's commit history over time, the cluster of offending commits occurs at an unusual time compared to rest of their activity. : If the dev was pwned, it could be a sign that the threat actor contributed in their own timezone 23:30- 23:00- 22:30- • 22:00- 21:30- 21:00 20:30- 20:00- 19:30 19:00 18:30 18:00- 17:30 17:00 16:30 16:00 15:30 15:00 14:30 14:00 5 13:30 13:00 12:30 12:00 ㅎ 11:30 11:00 10:30 10:00- 9:30 9:00 8:30 8:00 7:30- 7:00 6:30 6:00 oss-fuzz 5:30 cpp-docs 5:00 4:30 ⚫ wasmtime 4:00 • .github 3:30 3:00 XZ 2:30 • 2:00 1:30 1:00 0:30 0:00 ALT 01 xz-java xz-embedded tukaani-project.github.io 2022-04 2022-07 Jai Tan's Git Commits Over Time by Repository Malicious Commits Cluster: - Tests: Update two test files. ·liblzma: Fix false Valgrind error report with GCC. 2022-10 • 8:34 PM Mar 29, 2024 623.1K Views 2023-01 Date 2023-04 2023-07 2023-10 2024-01 2024-04

+1

XZ Backdoor Linux Hack


Uploaded by sakshi Mar 31, 2024 at 10:07AM EDT

Share Pin Download More

Origin Entry: XZ Backdoor Linux Hack

File type: png

Resolution: (1178px x 1338px)

File size: 974 KB


[-] Mysterious_Focus6144 352 points 17 hours ago The hooked RSA_public_decrypt verifies a signature on the server's host key by a fixed Ed448 key, and then passes a payload to system(). It sounds like the backdoor attempt was meant as the first step of a larger campaign: 1. Create backdoor. 2. Remotely execute an exploit. 3. profit. This methodical, patient, sneaky effort spanning a couple of years makes it more likely, to me at least, to be the work of a state, which also seems to be the consensus atm permalink source embed save save-RES report reply hide child comments [-] ProgsRS 159 points 16 hours ago It's very likely to be a planned group project given the amount of time it took. Less likely for a lone actor to have this much patience, foresight and commitment. There were others involved as fresh accounts who played different roles (like pressuring the maintainer) during certain periods and suddenly dropped off after, while Jia Tan was a separate persona who had been slowly and separately building trust with the end goal and task of delivering the final payload. It's possible that this was all the same person switching roles, but it's more likely to be an organized group effort over the span of years. permalink source embed save save-RES parent report reply hide child comments
PROPRIETARY BACKDOOR MENTAL GYMNASTICS I want a backdoor in this software I ask the corpo to grant me access OPEN SOURCE BACKDOOR MENTAL GYMNASTICS spend 5 years gaining Immediately get find not well maintained related project the mantainer trust noticed by an Insert brittle system to autist due to 0.5s startup delay introduce vulnerability
N UNDERGROU vx-underground @vxunderground JiaT75 on GitHub pretending to be an OSS enthusiast and 100% NOT a state-sponsored Threat Actor 5:54 PM Mar 30, 2024 107.8K Views
View All 20 Images


Moar:


+ Add a Comment

Comments (0)

There are no comments currently available.

Display Comments

Add a Comment


+ Add an Image

Image Details

287 views (10 from today)

Uploaded Mar 31, 2024 at 10:07AM EDT

Origin Entry

XZ Backdoor Linux Hack

Source

Twitter

Tags

xz backdoor, linux, hack the world, ssh connections, andres freund (tech), xz backdoor hack explained, two year plan, linux ubuntu hacker, xz backdoor explained, vulnerability, microsoft engineer

Claim Authorship Edit History
Textile Embed