@0nekoneko7@lemmy.world to Linux@lemmy.mlEnglish • 7 months agoKaspersky releases free tool that scans Linux for known threatswww.bleepingcomputer.comexternal-linkmessage-square74fedilinkarrow-up1106arrow-down163cross-posted to: news@lemmy.linuxuserspace.show
arrow-up143arrow-down1external-linkKaspersky releases free tool that scans Linux for known threatswww.bleepingcomputer.com@0nekoneko7@lemmy.world to Linux@lemmy.mlEnglish • 7 months agomessage-square74fedilinkcross-posted to: news@lemmy.linuxuserspace.show
minus-squareboredsquirrellinkfedilink7•7 months agoYes and if viruses use something like base64 encoding or other methods, the hashes dont match anymore. As far as I understood it, it is pretty easy to make your virus permanently un-hashable by just always changing some bits
minus-square@atzanteol@sh.itjust.workslinkfedilinkEnglish2•7 months agoThe xz backdoor was a packaged file distributed with the standard packages though. It would be trivial to find.
minus-squareboredsquirrellinkfedilink1•7 months agoThis is obviously not about this known file. It is about “would this scanner detect a system package from the official repos opening an ssh connection”
minus-square@atzanteol@sh.itjust.workslinkfedilinkEnglish1•7 months agoSorry, I was responding to: I HIGHLY doubt that they would detect the XZ backdoor
Yes and if viruses use something like base64 encoding or other methods, the hashes dont match anymore.
As far as I understood it, it is pretty easy to make your virus permanently un-hashable by just always changing some bits
The xz backdoor was a packaged file distributed with the standard packages though. It would be trivial to find.
This is obviously not about this known file.
It is about “would this scanner detect a system package from the official repos opening an ssh connection”
Sorry, I was responding to: