[asterisk-users] Strange Issue: asterisk deleted

[John Novack]

Question remains, how was it compromised?
In the original install ?
A "fresh" install perhaps from another source?

Best you determine HOW before spending more time going down another rabbit hole!

John Novack

Antoine Megalla wrote:
> Hi
>
> Thank you for your support.
> The server is actually compromised, I discovered that after making a deep trace using the audit daemon and looking for the kill signal (SIGKILL) that terminates asterisk.
<snipped to please the mailing list >

-- 

Dog is my Co-pilot

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.digium.com/pipermail/asterisk-users/attachments/20141127/78f1d9dc/attachment.html>