Fuck webmin, hello crypto miners

explain

😂😂😂😂😂😂 Yup, got the notice from CESNET too. Someone is using webmin on our network, and of course it is the guy managing the web of our gym (meaning, belonging to a students' club in which I am a manager)

@JoshBent Someone altered the Webmin releases before publishing, now the affected ones contain backdoors.

@sbiewald well god damn, is there any link to it also? found only that: https://reddit.com/r/netsec/...

@JoshBent http://www.webmin.com/exploit.html

@sbiewald thanks!

My sysadmin colleague left running preinstalled webmin on our main server. Yesterday, hackers got in and started mining :D They only left us 1 CPU core so we didn't find out. We probably wouldn't except they fucked up and deleted 1 cron. Good