Linux SSH Flaw Exploited

Southeast AsiaHackers breached Greynoise honeypots through a Linux login flaw.

Alpine Linux machines face the most risk among millions of internet-facing Secure Shell servers.

A password over 256 characters, tried on a passwordless account, makes musl’s hashing function return an asterisk that OpenSSH misreads.

Exploitation needs several conditions, including OpenSSH running without pluggable authentication modules.

OpenSSH has released a fix, and Greynoise says a GT10 server it accessed revealed other potential victims.

How each outlet framed it

Ars Technica leans critical: names the attacking group GT10 and notes its backdoor carries Chinese-language comments and appears AI-generated