Trojanized OpenSSH used in Linux, IoT device compromise

BleepingComputer reports that internet-facing Linux and Internet of Things devices have been targeted by brute-force attacks involving the distribution of a trojanized OpenSSH package to facilitate compromise and SSH credential exfiltration.

attacks bleepingcomputer brute brute-force compromise credential device devices device security distribution exfiltration internet internet of things iot iot device linux malware openssh package reports ssh things