New Campaign Exploiting Linux Servers to Insert Backdoor "SpeakUp" Trojan

[VK4ADC]

New Campaign Exploiting Linux Servers to Insert Backdoor "SpeakUp" Trojan

A new backdoor Linux-based operating system Trojan dubbed "SpeakUp" is on the loose, although so far it does not appear to have propagated to North America or Europe. Research team Check Point Research recently reported the discovery and said SpeakUp exploits known vulnerabilities in six separate Linux distributions and is able to evade all security vendors.

Some radio amateurs use various forms of Linux, including the popular Ubuntu software, which includes ham radio apps.
"The attack is gaining momentum and targeting servers in East Asia and Latin America, including AWS [Amazon Web Services]-hosted machines," the Check Point Research article said.

"SpeakUp acts to propagate internally within the infected subnet, and beyond to new IP ranges, exploiting remote code execution vulnerabilities. In addition, SpeakUp presented ability to infect Mac devices with the undetected backdoor."
(arrl letter)

From text edition for Feb 17 2019 - VK NATIONAL NEWS BROADCAST ON VK1WIA : http://www.wia.org.au/members/broadcast/wianews/

Also in MP3 edition of news available at: http://www.wia-files.com/podcast/wianews-2019-02-17.mp3