Unreal IRCd Forums states our mirrors has a backdoor (trojan) in it.

[iseeuu]

This is very embarrassing...

We found out that the Unreal3.2.8.1.tar.gz file on our mirrors has been replaced quite a while ago with a version with a backdoor (trojan) in it.
This backdoor allows a person to execute ANY command with the privileges of the user running the ircd. The backdoor can be executed regardless of any user
restrictions (so even if you have passworded server or hub that doesn't allow any users in).

It appears the replacement of the .tar.gz occurred in November 2009 (at least on some mirrors). It seems nobody noticed it until now.

More: UnrealIRCd Forums • View topic - Some versions of Unreal3.2.8.1.tar.gz contain a backdoor

Unreal IRC is an Internet relay chat platform. I don't have any numbers on the total downloads since November of 2009, but it seems safe to assume there are a lot of Linux systems out there compromised by a backdoor Trojan.

More: Linux Trojan Raises Malware Concerns - PCWorld Business Center

 

[osholt]

Oops... .

Oli

 

[Corrine]

I liked the comment by Jerry Bryant (MSRC, Group Manager, Response Communications), "Obscurity won't cut it anymore":

RT @edbott: My latest at @ZDNet: Linux infection proves Windows malware monopoly is over Linux infection proves Windows malware monopoly is over | ZDNet < Obscurity won't cut it anymr

 

[severedsolo]

I liked the comment by Jerry Bryant (MSRC, Group Manager, Response Communications), "Obscurity won't cut it anymore":

RT @edbott: My latest at @ZDNet: Linux infection proves Windows malware monopoly is over Linux infection proves Windows malware monopoly is over | ZDNet < Obscurity won't cut it anymr

Many thanks for that Corrine

I really have to chuckle, "our system is impenetrable, it's all open source so anyone can see if something nasty has been put in there" yes but does anyone actually look at it?