Facebook Google Plus Twitter LinkedIn YouTube RSS Menu Search Resource - BlogResource - WebinarResource - ReportResource - Eventicons_066 icons_067icons_068icons_069icons_070

Successful Shell Attack Detected - Linux 'passwd' Command Changed Password

High

Synopsis

A successful shell attack was detected.

Description

A 'passwd' command occurred in a TCP session normally used for a standard service. This indicate that successful compromise of this service has occurred.

Solution

The command activity observed is indicative of a possible compromise. Consider performing a full audit of the system to investigate further.