Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

  > 1016 cd ~; chattr -ia .ssh; lockr -ia .ssh
Does anyone know what the "lockr" command is? I can't find any references to it besides people saying they observed malware trying to run it, usually (as is the case here) right after a chattr command with the same arguments.


https://blog.netlab.360.com/icnanker-trojan-downloader-shc-e... has:

    cp -f /usr/bin/chattr /usr/bin/lockr



I think that's something totally unrelated that just happens to have the same name. I don't see anything in their docs that even hints at a UNIX command called "lockr", let alone one that makes sense to call like that.




Consider applying for YC's Fall 2026 batch! Applications are open till July 27.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: