Hackers !

just noticed one of my server has high CPUsage ..
so i going to check a bit aroung on server an found in /tmp
----
./km3 -c id
and
phpshellDcazop
---

so i delet this.... and server goes normal into the CPUage.
afther 2 min. it's going up again....
I found in /tmp
----
./km3new -d
----

Question: How is it possible hacker going into the /tmp and using a lot of cpu and hacking the server?
Is there any way to prevent this??


I already have the latest patch installed for kernel/OpenSSL/Apache etc.


PS: seems this guy comes from france... just e-mailed his ISP




Hackers !

 

 

 

 

Top