LinuxQuestions.org
Review your favorite Linux distribution.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Linux Mint
User Name
Password
Linux Mint This forum is for the discussion of Linux Mint.

Notices


Reply
  Search this Thread
Old 02-21-2016, 08:06 AM   #1
TxLonghorn
Member
 
Registered: Feb 2004
Location: Austin Texas
Distribution: Mandrake 9.2
Posts: 702

Rep: Reputation: 231Reputation: 231Reputation: 231
linuxmint.com is currently offline


linuxmint.com is currently offline. It was taken down intentionally to prevent any risk to people who are downloading the 64bit Mint Cinnamon .iso
The site was hacked so that the Cinnamon .iso download came from IP 5.104.175.212. (Which is not Mint)
That IP address is linked to Verdina Ltd. in Belize. The contact person given in whois is Lyubomir Bambov with an address in Sofia.

WHOIS info:
Quote:
person: Lyubomir Bambov
address: Pernik 97 str., appartment 18, Sofia
phone: +359897596946
nic-hdl: LB12906-RIPE
mnt-by: Verdina
http://www.whois.com/whois/5.104.175.212


The 64bit 17.3 Cinnamon and 64bit 17.3 Cinnamon nocodecs were affected
There was no problem with the 64 bit OEM version.
It did not affect 17.2 or 17.3 Cinnamon 32 bit, and did not affect any other Desktop than Cinnamon.
 
Old 02-21-2016, 02:13 PM   #2
elstellino
LQ Newbie
 
Registered: Feb 2016
Distribution: Mint 17.3 – 64 – Cinnamon
Posts: 1

Rep: Reputation: Disabled
Wow. Any news when it will be up again?
And who is this Lyubomir guy by the way? Did somebody denounce him already?
 
Old 02-21-2016, 02:35 PM   #3
TxLonghorn
Member
 
Registered: Feb 2004
Location: Austin Texas
Distribution: Mandrake 9.2
Posts: 702

Original Poster
Rep: Reputation: 231Reputation: 231Reputation: 231
Sorry, I have no info on those questions.
They have been offline now for about 20 hours.
 
Old 02-21-2016, 02:48 PM   #4
astrogeek
Moderator
 
Registered: Oct 2008
Distribution: Slackware [64]-X.{0|1|2|37|-current} ::12<=X<=15, FreeBSD_12{.0|.1}
Posts: 6,264
Blog Entries: 24

Rep: Reputation: 4195Reputation: 4195Reputation: 4195Reputation: 4195Reputation: 4195Reputation: 4195Reputation: 4195Reputation: 4195Reputation: 4195Reputation: 4195Reputation: 4195
More here in an earlier thread,,,
 
Old 02-21-2016, 02:57 PM   #5
TxLonghorn
Member
 
Registered: Feb 2004
Location: Austin Texas
Distribution: Mandrake 9.2
Posts: 702

Original Poster
Rep: Reputation: 231Reputation: 231Reputation: 231
The first-hand information is here.

user Says:
so did you bother to track the back door? where does the rabbit hole lead?

Clem: The fake ISO in Sofia, the OS backdoor in Sofia also, the guy accessing our server via the second backdoor from Russia, but when you look at a hole and see somebody looking at you, you need to figure out who knows more than the other, and if we’re reacting to their actions it was pretty clear we had to take everything down. The hacker from Russia (could be a VPN of course) even DDOSed my personal IP to prevent me from taking the site down. He also took down part of his set up since.

Last edited by TxLonghorn; 02-21-2016 at 03:13 PM.
 
Old 02-21-2016, 09:46 PM   #6
frankbell
LQ Guru
 
Registered: Jan 2006
Location: Virginia, USA
Distribution: Slackware, Ubuntu MATE, Mageia, and whatever VMs I happen to be playing with
Posts: 19,326
Blog Entries: 28

Rep: Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142
I commend Mint for dealing with this proactively.
 
Old 02-23-2016, 01:13 PM   #7
TxLonghorn
Member
 
Registered: Feb 2004
Location: Austin Texas
Distribution: Mandrake 9.2
Posts: 702

Original Poster
Rep: Reputation: 231Reputation: 231Reputation: 231
linuxmint.com is back online - with .iso downloads available.
forums.linuxmint.com still down.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Could not boot into LinuxMint monojeffrey Linux Mint 2 05-05-2013 08:26 AM
LinuxMint 11 itsjustme Linux Mint 7 09-19-2011 06:56 AM
AWN on LinuxMint 8 fkasmani Linux - Newbie 21 03-04-2010 02:19 PM
LINUXmint sabrodiesel2000 Linux - Hardware 4 10-28-2009 12:05 PM
linuxmint.com down? fullmetalgerbil Linux - General 4 02-25-2008 10:11 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Linux Mint

All times are GMT -5. The time now is 08:38 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration