Ebury

Reported Context (2)

of users who ignored SSH’s warning and then tried to infect the servers they were logging into with Ebury. Weekly Security Roundup Covers Hijacked Tor Relays, AI Agents and Data Breaches
Perl installer. In kaba's honeypot, the installer took the same form as the command that put Ebury, a backdoor that hides inside OpenSSH, on one of a relay operator's servers, as described below. Attackers Hijacked 300+ Tor Exit Relays to Intercept SSH Passwords

Malware (2)

People (7)

Threat Actors (2)

MITRE ATT&CK (6)

Vendors (5)

Products (11)

Tools (1)

Industries (1)

Countries (2)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.