remote assistance attacks on Linux - possibility?

linuxeffect · Post by **linuxeffect** » Sun Mar 08, 2015 6:20 pm

How vulnerable is Linux Mint is to the likes of a remote assistance tool, aka 'RAT' attack, from criminals - or (seemingly far more likely at the moment) the immature teen prankster with too much time? For example, https://www.youtube.com/watch?v=1rKYqGFug4k

There are remote tools for Linux, so I do wonder if a Linux user could also be just as succumb to attack; or whether becoming a victim is solely down to installing malware. I assume becoming a Windows victim is the result of downloading malicious software disguised as something genuine, or visiting a rogue website without good firewall or malware protection.

Most of these 'hack' tools seem to be modified or legit gui based remote assistance applications and nothing more. Users brag on youtube about how many 'slave' computers they've managed to take control of. They do seem to be all on windows, targeting other windows users. The public may now have a valid reason as to why they weren't just being paranoid by taping that laptop's built in webcam whilst not in use after all.

Could a prankster access your Linux OS content with an assistance tool, eg windows remote assistance related malware, active via the likes of Wine, or not?
I do wonder if these tools can be made to take control of multiple platforms. Thanks for any info.

Pjotr · Post by **Pjotr** » Sun Mar 08, 2015 6:35 pm

It seems plausible that remote assistance poses an extra risk, in Windows as well as in Linux. That's just common sense.

I can't assess how high that risk is in Linux (my guess is: not high). However, I think it's wise only to enable remote assistance in Linux, when you really need it. Just to be on the safe side.

linuxeffect · Post by **linuxeffect** » Sun Mar 08, 2015 7:14 pm

Thanks for the reply. It's more out of interest than worry. I suspect these tools will become more sophisticated. Some people brag on forums that the most malicious RAT tools are completely undetectable on windows already, although I have strong doubts about those kinds of claims. The most malicious activity I can find is either someone controlling another users browser and backing up all their passwords, or recording them live without them knowing. I await the day every built-in laptop webcam has a cover. It will happen

crust · Post by **crust** » Mon Mar 09, 2015 1:55 pm

The general idea behind Linux is to always willingly have to install software, that's also the reason that after a regular set up the main account isn't the same as the root account. Working under the root account poses the serious threat of completely cirkling around the passphrase confirmation thus making your system as vulnerable as windows.

amity88 · Post by **amity88** » Tue Mar 10, 2015 12:12 am

@Pjotr,
How do you enable remote assistance in Mint? I normally use ssh or tightVNC for remote access, is there a new feature in Mint?

@linuxeffect,
That really isn't a vulnerability IMO, the fault is with the user. People use shitty passwords/poor configurations/enable unnecessary services and some random guy comes along and guesses it. To answer your question, I'd say it all depends on how you've configured it. I think Mint comes with those services disabled out of the box, so don't worry too much

The remote access tools are crossplatform, yes. I've install an entire Linux OS remotely over SSH. So yeah, if there is access quite a lot can be done but the point is you need to give it to them knowingly/unknowingly.

regards,
Amit

Pjotr · Post by **Pjotr** » Tue Mar 10, 2015 6:00 am

amity88 wrote:@Pjotr,
How do you enable remote assistance in Mint?

Menu button - Preferences - Desktop Sharing

I've never enabled it though, because it might decrease security....

Linux Mint Forums