For me, it looks like: 17630 27 S 0:00.00 /usr/sbin/httpd (perl) which stands ou... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		swills on April 29, 2021 \| parent \| context \| favorite \| on: RotaJakiro: A long live secret backdoor with 0 VT ... For me, it looks like: 17630 27 S 0:00.00 /usr/sbin/httpd (perl) which stands out like a sore thumb, IMHO.

fullstop on April 29, 2021 | [–]

That's what I see on FreeBSD.

ps, top, and htop all show /usr/sbin/httpd on Ubuntu.

tyingq on April 29, 2021 | [–]

*BSD, I suppose, but the idea is that the binary itself would be named httpd. Like "cp /usr/bin/perl ./httpd" first.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact