Machine compromised

[Matthew Miller]

On Wed, Dec 20, 2006 at 12:05:51AM -0500, bhiksha wrote:
> Im particularly concerned that either
> a. Backup is not a standard account and they managed to create it 
> nevertheless

"backup" is not a standard account. After they compromised the machine, they
created it, in the hopes that such a generic name might be overlooked in
process listings and the password file.



-- 
Matthew Miller           mattdm at mattdm.org          <http://mattdm.org/>
Boston University Linux      ------>              <http://linux.bu.edu/>