Hacker tries to compromise and resell an internet-facing Linux server
morris.guru
morris.guru
"It also appears that the hackers attack machine may be hosting an unauthenticated web proxy" makes it sound like the attacker owns the machine they were connecting from. IMO, chances are that "49.213.23.171" is just another compromised box.
I bet it would actually run as a proxy/VPN to post spam on forums.
Also - has anyone seen how cheaply access is being sold for!? It's pennies!
echo "screenfetch" >> .bashrc
The poster was able to find the HutHos site owner's full information "in a few minutes", due to "poor operational security practices." Doesn't this raise the possibility that the HutHos server was compromised by the malware's true owner?
In other words, the simplest explanation is that Huthos is taking control of machines so that they can sell them to customers as their own VPS service.
In Huthos case, they 'hack' the credit part by simply taking a machine with poor identity management in place (honeypot) and then provide a high level of anonymization for their customers (the 'who I am' above) and providing it as a standard way for extending a VPS offering (which itself provides 'who I am' services).
It's all about trust, and what's the most irritating part about it is that the violate it first before they get to selling it to others. Crazy.
I'd want a bit more proof, like it actually being used by a Huthos customer, before going after them.
So yeah, not sure about Huthos but Vision Phreak is definitely shady.
I love how he gives advise to the company at the end. I mean c'mon you get root access via dictionary attack within a quick timeframe and you don't think it is a honeypot?
Huthos could simply be an innocent clueless bystander in a larger compromise situation.
It must be a female.
Using "her" actually apparently attracts attention away from the content. Perhaps mixing both within a longer body of text is a more subtle way.
Lewis Carroll: "'Whoever lives there,' thought Alice, 'it'll never do to come upon them this size: why, I should frighten them out of their wits!'"
C. S. Lewis: "She kept her head and kicked her shoes off, as everybody ought to do who falls into deep water in their clothes."
Doris Lessing: "And how easy the way a man or woman would come in here, glance around, find smiles and pleasant looks waiting for them, then wave and sit down by themselves."
E.B. White: "But somebody taught you, didn’t they?”
This is settled. Singular 'they' is good English and always has been. The rule against it was just made up by 18th century grammarians (including the fascinating Ann Fisher [4], who surely would regret it now) and they even got a law passed in 1850 prohibiting it, which only goes to show how widely used it was.
1. https://web.archive.org/web/20150328135337/http://www.crossm...
2. http://itre.cis.upenn.edu/~myl/languagelog/archives/002748.h...
3. http://www.pemberley.com/janeinfo/austhlis.html
4. http://www.nytimes.com/2009/07/26/magazine/26FOB-onlanguage-...
"Alternatively, they as a singular pronoun can refer to an individual without strictly giving it a gender."
https://en.wikipedia.org/wiki/Singular_they
"Singular they is the use of they, or its inflected or derivative forms, such as them, their, or themselves, to refer to a single person or an antecedent that is grammatically singular. It typically occurs with an antecedent of indeterminate gender"
"One" works in some cases. Unfortunately, not when referring to something directly. I'd love to see "onesie" used for that, but it's not going to happen.
If nothing else, one could use "one" to establish singularity when they use "they" later on.
http://cs.unc.edu/~fabian/course_papers/PtacekNewsham98.pdf
Partly it was a showy gesture, but after writing that way for a few days, I came to like how the distinct pronouns made it easy to track "attacker" and "defender" in the narrative, too.
I'd just use "they" now, though.
As much as I hate giving attackers anything, I am very dedicated to information sharing so that people can learn as much as possible from my posts. The truth is always out there one way or another. I would rather everybody be as educated as possible. Hopefully that makes sense.
EDIT: Security newb here. It was a honeypot, aka a trap.