The Internet Was Weeks Away From Disaster And No One Knew

XZ backdoor discovered

A sophisticated backdoor was hidden in the XZ compression utility. It was designed to grant attackers remote access to Linux systems. It was discovered by chance due to performance slowdowns, narrowly avoiding a widespread disaster.

• 🐧 The backdoor was hidden within the XZ data compression library, a dependency of OpenSSH.
• 🕵️ The attacker, "Jia Tan," spent years subtly manipulating the XZ project, even taking over as maintainer.
• 🔑 The exploit targeted the SSH RSA authentication process, allowing a secret master key to grant access.
• 🐌 A programmer named Andres Freund noticed unusual slowdowns in Debian's testing environment, leading to the discovery.
• 🇨 🇳 Evidence suggests the attacker may be state-sponsored, possibly from China or Russia, but their identity remains unknown.

A glowing blue penguin, representing Linux, with the letters 'XZ' on its head and the word 'Infected.' written next to it.