25,000 ??? Linux/UNIX ????????? Operation Windigo

?Operation Windigo??????????????????????????????????????????????????????????????????????? 2011 ????25,000 ????? Linux/UNIX ????????????SSH?Secure Shell???????????????Web ????????????????????????????????????????????????????cPanel ? Linux Foundation ?????????????????????????????????????????????????OS X?OpenBSD?FreeBSD?Microsoft Windows???? Linux ???????????????????????????????????Windigo ????? 3,500 ????????????????????????????????700 ???? Web ????????1 ??????? 50 ???????????????????????????

?????????????????????????????? 3 ?????????????? ESET ???????

• Linux/Ebury – ???????????????????????? OpenSSH ?????
• Linux/Cdorked – Web ?????????????????? HTTP ?????
• Perl/Calfbot – ??????????? Perl ?????

?????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????Operation Windigo ?????Web ???????????????????????????????????
 

???????????

???????????????????????????????Operation Windigo ???????????????????????

??????

• Backdoor.Trojan
• Linux.Cdorked
• Linux.SSHKit
• Linux.SSHKit!gen1
• Trojan.Dropper
• Trojan.Tracur!gen5
• Trojan.Tracur!gen8

????????

• System Infected: Festi Rootkit Activity

ESET ?????????? Operation Windigo ????????ESET ???????????????

* ??????????????????? RSS ????????????http://www.symantec.com/connect/ja/item-feeds/blog/2261/feed/all/ja ????????????