Linux websites down after breach


The Linux Foundation and related websites have been taken down following a compromise discovered on 8 September.

The websites were taken offline "in the interest of extreme caution and security best practices," the Linux Foundation said on a holding page.

"We are in the process of restoring services in a secure manner as quickly as possible," the organisation said.

"As with any intrusion and as a matter of caution, you should consider the passwords and SSH [Secure Shell] keys that you have used on these sites compromised. If you have reused these passwords on other sites, please change them immediately."

The foundation said it was auditing all systems and will update the statement once more information emerges.

"The Linux Foundation infrastructure houses a variety of services and programs including, Open Printing, Linux Mark, Linux Foundation events and others, but does not include the Linux kernel or its code repositories," it added.

The body said it believes the breach on was related to an intrusion on discovered last month.

We currently believe that the source code repositories were unaffected.

The website currently says it is down for maintenance. In August, a number of servers in the infrastructure were hacked.

"While we currently believe that the source code repositories were unaffected, we are in the process of verifying this and taking steps to enhance security across the infrastructure," a note previously on read.

According to the Hacker News, the Phalanx rootkit was used to eventually gain root access to systems.

Authorities in both the US and Europe have been notified.

Tom Brewster

Tom Brewster is currently an associate editor at Forbes and an award-winning journalist who covers cyber security, surveillance, and privacy. Starting his career at ITPro as a staff writer and working up to a senior staff writer role, Tom has been covering the tech industry for more than ten years and is considered one of the leading journalists in his specialism.

He is a proud alum of the University of Sheffield where he secured an undergraduate degree in English Literature before undertaking a certification from General Assembly in web development.