[Full-disclosure] Devil Linux 1.2.10 has an IRC bot onboard

Victor Grishchenko gritzko at plotinka.ru
Thu Oct 19 10:13:46 BST 2006


Hi!

While building and testing a customized version of DevilLinux router 
distro I found an IRC bot onboard. As far as I understood, it was 
EnergyMech compiled from source right there plus some executable named 
"TODO" (for camouflage purposes). The stuff unfolds at /shm/sshd/ and 
runs somehow. Sadly, I had no time for detailed investigation. It leaves 
an overall impression of script kiddie's work.
Last days DevilLinux website seems to be dead.


                      Victor Grishchenko
                      Digital Channels Network
                      Yekaterinburg, Russia




Full-Disclosure is hosted and sponsored by Secunia.