PamDOORa is a remarkably cheap date

The darkworm actor is currently selling a backdoor called PamDOORa which hooks into Linux PAM modules to harvest SSH credentials for anyone with a spare bit of cash. This affects anyone running Linux servers who mistakenly believed their SSH keys were tucked away safely behind a wall of competence. Securing the perimeter involves more than just hoping Russian forums go offline for the weekend. We are essentially fighting a battle where the enemy has a better business model and significantly lower overheads than our actual IT department, which is just the sort of news I need on a Friday.