How do we detect it's presence ? | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		chmike on Aug 28, 2013 \| parent \| context \| favorite \| on: Linux Trojan “Hand of Thief” How do we detect it's presence ?

orclev on Aug 28, 2013 [–]

Not entirely sure about detection, but it seems like you could just add some "fake" indicators to your distro to make it look like it's a VM instance and the trojan will helpfully delete itself.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact