Thread: Hacked file permissions - cannot change back
my ubuntu server hacked brute force attack via ssh. hacker changed permissions on system files (ps, netstat, find, etc.) cannot change via sudo. hacker changed owners 122:114, don't exist. idea how change these root:root? system offline, lessons learned, , we're trying determine files hacker may have added sytem determine intentions were.
the way change them boot using rescue cd , use chown.
however, there no way know else changed only safe option data , clean installation, wiping old system files. example of have separate /home directory , other data directories.
Forum The Ubuntu Forum Community Ubuntu Specialised Support Security [ubuntu] Hacked file permissions - cannot change back
Ubuntu
Comments
Post a Comment