Hackers !
just noticed one of my server has high CPUsage ..so i going to check a bit aroung on server an found in /tmp
----
./km3 -c id
and
phpshellDcazop
---
so i delet this.... and server goes normal into the CPUage.
afther 2 min. it's going up again....
I found in /tmp
----
./km3new -d
----
Question: How is it possible hacker going into the /tmp and using a lot of cpu and hacking the server?
Is there any way to prevent this??
I already have the latest patch installed for kernel/OpenSSL/Apache etc.
PS: seems this guy comes from france... just e-mailed his ISP
