Security Hero Rotating Header Image

SSH server attacks resurface

SSH server attacks resurface

Security researchers are warning administrators to secure their servers in the wake of new Secure Shell (SSH) attacks. Researchers at security firm SANS warned that so-called ‘brute force’ attacks were occurring on a “daily” basis. The attacks attempt to guess usernames and passwords in an attempt to compromise the server.

To help guard against the attacks, SANS researcher Daniel Weseman recommended that administrators help guard against the attacks by making both usernames and passwords more difficult for attackers to guess.

“If you are running any SSH server open to the Internet, and your usernames and passwords aren’t at least 8 characters or so, your box is either owned by now, or about to be,” explained Wesemann. “It doesn’t matter one bit what sort of device it is – those who run these scans have proven to be equally apt at taking over a Cisco router as they are at subverting an iMac.”


Leave a Reply

Your email address will not be published. Required fields are marked *