- cross-posted to:
- [email protected]
- cross-posted to:
- [email protected]
Based on Mirai malware, self-replicating NoaBot installs cryptomining app on infected devices.
Based on Mirai malware, self-replicating NoaBot installs cryptomining app on infected devices.
Harden your configs people.
AllowUsers is a really goood one.
Or just don’t allow password auth at all.
Or just have a good password
If we’re going to play that game. Require an Ed25519 key with a strong password.
Or ed25519-sk.
(In this case the “wrench” is just breaking into some weak link that isn’t ssh, once your password is strong to not be a weak link)
Also install something like fail2ban to prevent brute force attacks.