Page 1 of 1

PSA: Linux mint got hacked, and a trojan was in their ISOs.

Posted: 22 Feb 2016, 04:41
by vexed
http://news.softpedia.com/news/linux-mi ... 0719.shtml
Just a few moments ago, Clement Lefebvre, leader of the Linux Mint project, informs users of the popular, Ubuntu-based distribution that the servers where the Linux Mint website is hosted have been hacked to point the download links to specially crafted ISOs.

According to Mr. Lefebvre, it appears that a group of hackers created a modified Linux Mint ISO, which included a backdoor. Then, they hacked into the Linux Mint website and modified the download links to trick users into downloading the malicious ISO image.

"I’m sorry I have to come with bad news. We were exposed to an intrusion today. It was brief and it shouldn’t impact many people, but if it impacts you, it’s very important you read the information below," said Clement Lefebvre in the announcement.

It would appear that only the Linux Mint 17.3 Cinnamon edition has been compromised at the moment of writing this article, and those of you who downloaded these ISO images on February 20, 2016, need not install them on your computer, but delete them as soon as possible.

Re: PSA: Linux mint got hacked, and a trojan was in their I

Posted: 11 Apr 2016, 23:03
by Doruletz
vexed wrote:http://news.softpedia.com/news/linux-mi ... 0719.shtml
Just a few moments ago, Clement Lefebvre, leader of the Linux Mint project, informs users of the popular, Ubuntu-based distribution that the servers where the Linux Mint website is hosted have been hacked to point the download links to specially crafted ISOs.

According to Mr. Lefebvre, it appears that a group of hackers created a modified Linux Mint ISO, which included a backdoor. Then, they hacked into the Linux Mint website and modified the download links to trick users into downloading the malicious ISO image.

"I’m sorry I have to come with bad news. We were exposed to an intrusion today. It was brief and it shouldn’t impact many people, but if it impacts you, it’s very important you read the information below," said Clement Lefebvre in the announcement.

It would appear that only the Linux Mint 17.3 Cinnamon edition has been compromised at the moment of writing this article, and those of you who downloaded these ISO images on February 20, 2016, need not install them on your computer, but delete them as soon as possible.
That’s the biggest load of crap, if I ever heard one.... Linux hacked??? Dude, that's a Microsoft special only.... :lol2:

Re: PSA: Linux mint got hacked, and a trojan was in their I

Posted: 12 Apr 2016, 04:25
by vexed
Doruletz wrote: That’s the biggest load of crap, if I ever heard one.... Linux hacked??? Dude, that's a Microsoft special only.... :lol2:
Did you bother to read the story?
It did happen.

Re: PSA: Linux mint got hacked, and a trojan was in their I

Posted: 12 Apr 2016, 16:01
by Tzeentch
Linux Mint isn't so Mint it would seem.

Re: PSA: Linux mint got hacked, and a trojan was in their I

Posted: 12 Apr 2016, 20:31
by Jorzi
Just to clarify:
They didn't hack into a desktop machine running Linux Mint, they hacked into the file hosting service and modified the download.
As long as you have the real Linux Mint, you should be safe.

Re: PSA: Linux mint got hacked, and a trojan was in their I

Posted: 12 Apr 2016, 21:29
by cybersphinx
Jorzi wrote:As long as you have the real Linux Mint, you should be safe.
Arguable: https://lwn.net/Articles/676664/