An attacker broke into the update system of the cPGuard security tool on November 2 and used it to send a malicious script to customers' Linux servers.
The script installed a backdoor and collected password hashes and other sensitive files from servers that ran it, cPGuard maker OPSSHIELD said in an advisory. In a later disclosure, OPSSHIELD said about 2,950 customer servers ran the script,
This article has been indexed from The Hacker News
Read the original article:
cPGuard Update Channel Hijacked to Backdoor Linux Servers and Collect Password Hashes