[sf-lug] ebay security analysis: phishers targeting linux (fwd)

[Kristian Erik Hermansen]

PHP/Post-nuke are very commonly exploited.  I am not surprised at all.
 Once you get shell even as user apache/www-data, it is trivial to
escalate on most systems.  The guy installed a common botnet utility.
Maybe if the server had AV or LIDS installed, the admin would have
noticed...
-- 
Kristian Erik Hermansen