<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Hallo zusammen,<div class=""><br class=""></div><div class="">ich geb’ das mal unkommentiert weiter.</div><div class=""><br class=""></div><div class="">Grüße,</div><div class="">Mark<br class=""><div><br class=""><blockquote type="cite" class=""><div class="">Anfang der weitergeleiteten Nachricht:</div><br class="Apple-interchange-newline"><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;" class=""><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif; color:rgba(0, 0, 0, 1.0);" class=""><b class="">Von: </b></span><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif;" class="">Bernd Kohler <<a href="mailto:kohler@itc.rwth-aachen.de" class="">kohler@itc.rwth-aachen.de</a>><br class=""></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;" class=""><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif; color:rgba(0, 0, 0, 1.0);" class=""><b class="">Betreff: </b></span><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif;" class=""><b class="">[rwth-security] Backdoor in (python) ssh-decorator package</b><br class=""></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;" class=""><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif; color:rgba(0, 0, 0, 1.0);" class=""><b class="">Datum: </b></span><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif;" class="">11. Mai 2018 um 12:26:58 MESZ<br class=""></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;" class=""><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif; color:rgba(0, 0, 0, 1.0);" class=""><b class="">An: </b></span><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif;" class=""><a href="mailto:rwth-security@lists.RWTH-Aachen.de" class="">rwth-security@lists.RWTH-Aachen.de</a><br class=""></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;" class=""><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif; color:rgba(0, 0, 0, 1.0);" class=""><b class="">Umgeleitet von: </b></span><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif;" class=""><a href="mailto:mark.asbach@rwth-aachen.de" class="">mark.asbach@rwth-aachen.de</a><br class=""></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;" class=""><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif; color:rgba(0, 0, 0, 1.0);" class=""><b class="">Antwort an: </b></span><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif;" class=""><a href="mailto:kohler@itc.rwth-aachen.de" class="">kohler@itc.rwth-aachen.de</a><br class=""></span></div><br class=""><div class=""><div class="">Hallo zusammen,<br class=""><br class="">sofern hier jemand das Python "ssh-decorator" Packet verwendet<br class=""><br class="">(installiert via pip) durfte sich über eine mitgelieferte Backdoor <br class=""><br class="">(Übermittlung von ip+login+password nach ssh-decorate[.]cf) freuen.<br class=""><br class="">Sofern nicht selber schon gesehen/-lesen hier [0] FYI<br class=""><br class="">VG<br class=""><br class="">Bernd<br class=""><br class=""><br class="">[0]<br class=""><a href="https://www.reddit.com/r/Python/comments/8hvzja/backdoor_in_sshdecorator_package/" class="">https://www.reddit.com/r/Python/comments/8hvzja/backdoor_in_sshdecorator_package/</a><br class=""><br class="">-- <br class=""><br class="">Bernd Kohler<br class=""><br class="">IT Center<br class="">Abteilung: Netze<br class="">RWTH Aachen University<br class="">Wendlingweg 10<br class="">52074 Aachen<br class="">Tel: +49 241 80-29793<br class="">Fax: +49 241 80-22666<br class="">kohler@itc.rwth-aachen.de<br class="">https://www.itc.rwth-aachen.de<br class=""><br class=""></div></div></blockquote></div><br class=""></div></body></html>