Worst nightmare becomes reality: Linux Mint distro hacked and backdoor introduced

Linux distributor ‘Linux Mint’ warned users over the weekend that it has been hacked, exposing users to a malicious backdoor and compromising sensitive customer information.

Project leader Clement Lefebvre explained in a blog post that the attacker made a modified Linux Mint ISO, with a backdoor in it, and then hacked the distributor’s website to point to it.

My company offers consulting on how to prepare for TISAX, ISO27001, NIS2, CSMS and SOC2 audits.
Get in touch with us here: https://www.endpoint-cybersecurity.com/contact/

In this moment the website is still down: http://www.linuxmint.com/ but the blog isn’t.

You should check the hash of the ISO you’re downloading!

Oh, I forgot to mention: also all user data was stolen.

More here:

http://blog.linuxmint.com/?p=2994

http://www.infosecurity-magazine.com/news/linux-mint-users-compromised-after/


© Copyright 2016 Sorin Mustaca, All rights Reserved. Written For: Sorin Mustaca - Security & Technology


Want to work with me on this topic?
Check Endpoint Cybersecurity to see the consulting services we offer.

Related Posts

Do you actually need a security product in your car? Part 3 : Intrusion Prevention and Detection Systems

I ended part 2 with the promise that we will discuss about : 2) Intrusion detection and prevention systems (IDS/IPS or IDPS) From Wikipedia: My company offers consulting on how to prepare for TISAX, ISO27001, NIS2, CSMS and SOC2 audits. Get in touch with us here: https://www.endpoint-cybersecurity.com/contact/ Intrusion prevention systems (IPS), also known as intrusion […]

ISO 27001:2022 and TISAX: overlaps and differences

Introduction ISO 27001:2022 and TISAX VDA ISA 6.0 are two prominent standards in the realm of information security management, particularly within the automotive industry. While ISO 27001 provides a global framework for establishing, implementing, maintaining, and continually improving an information security management system (ISMS), TISAX (Trusted Information Security Assessment Exchange), based on the VDA ISA […]

Articles about Java zero-day exploit

http://www.technewsworld.com/story/77079.html Oracle rushed out a patch for a Java flaw that was so serious the U.S. government advised users to uninstall the software. The fix might have come too quickly, however. “Developing critical software under pressure has only one consequence — even more bugs,” said Avira data security expert Sorin Mustaca. “I expect to soon […]