My pebble box has been hacked
"John Benjamin" <[email protected]>
| Newsgroups | gmane.network.wireless.seattle.devel |
|---|---|
| Message-ID | <[email protected]> |
Apologies if this is OT. For more than a year I have had a soekris board
running Pebble .41 in a local coffee shop. All has been grand until this
afternoon. When I logged I was greeted by this:
--------------------------------------------------------
_ _ ____ _____ ____
_| || |_ | _ \ ___ ___|_ _|___ | _ \ ___
|_ .. _|| |_) |/ _ \ / _ \ | | / _ \| |_) |/ __|
|_ _|| _ <| (_) || (_) || || __/| _ < \__ \
|_||_| |_| \_\\___/ \___/ |_| \___||_| \_\|___/
_____ _____ _ __ __
|_ _|| ____| / \ | \/ |
| | | _| / _ \ | |\/| |
| | | |___ / ___ \ | | | |
|_| |_____|/_/ \_\|_| |_|
--------------------------------------------------------
SySTem HaCkEd By #RooTeRs Team ! UnDerNEt ! this very very unSeCuReD
SeRvEr
GrEeTiNgS To |LaUr| ! Storm4u & oRiCaRe !
--------------------------------------------------------
The file system looks to be intact and the functionality of the box seems
fine.
I found the only changes / additions to the file system in /etc with the
files: resolv.conf, group & motd having date stamps of a few days ago. The
motd file has the above ascii graphics and message. I dont see any other
traces of what else these folks might have done, but I am not sure I really
know what to look for or where to look. Has anyone else had this happen
to them? I'm not fluent in *nix so I have a lot to learn and would
appreciate any assistance on figuring this out.
Thanks,
John
cavu networks
_______________________________________________
Dev mailing list
[email protected]
http://seattlewireless.net/mailman/listinfo/dev