The next xz attack
summary
An attack between 2021 and 2024 injects a binary into xz via the build pipeline so the compromised xz userland can subvert SSH worldwide, with the campaign taking 3 years from first contact to attempted release. The backdoor hides outside source control, is caught only because a developer notices a half-second login delay, and the campaign uses fake contributor accounts; now LLM-generated sockpuppets make that social engineering far cheaper and scalable.
AI-written summary · about
related talks
01h 09mThe Critical Path to Implant Backdoors and Potential Mitigation Techniques: Learnings from XZ...
47mXZ made EZ
42mXZ Backdoor: Navigating The Complexities Of Supply Chain Attacks Detected By Accident
05mThe XZ Backdoor and a 40 Year Old Prediction
40mAnalysis of and Lessons from the Xz-Utils Vulnerability – What Mig...
44mAnatomy of a Vulnerability
26mnx Compromise - AI as an Attack Vector
26mTechnical Tracks