[VoiceOps] Fwd: [Sheflug] Zero-day rootkit?

[Paul Cupis]

On Thu, Feb 21, 2013 at 09:46:25PM +0000, Gavin Henry wrote:
> Anyone seeing this on any of your softswitches/SBCs/SIP Proxies that
> are built on Linux kernels?

There is a suggestion that it is related to cPanel tech support server
being compromised.

http://isc.sans.edu/diary/SSHD+rootkit+in+the+wild/15229
http://www.webhostingtalk.com/showpost.php?p=8569905&postcount=1187
http://forums.cpanel.net/f185/cpanel-security-325062.html

Regards,