Apache SSH Key compromised

UPDATE: A post regarding this incident from apache.org is available at https://blogs.apache.org/infra/entry/apache_org_downtime_initial_report


As of this moment, Apache.org is reporting that SSH key associated with its US servers has been compromised and are shifting all traffic to their European mirror.

28-08-2009 12-10-13


Details of the attack/compromise are few at the moment, as this is breaking news. It is worth remembering however that a compromised SSH key led to in-the-wild exploitation of Linux based systems exactly this time last year, for the purposes of installing rootkits. Keep your eye on how this story develops.


Apache servers account for around 50% of all web servers in the July 2009 web server survey.

6 thoughts on “Apache SSH Key compromised

  1. Pingback: ShaunWright.co.uk » Blog Archive » Dare I say, Owned? Again.

  2. Pingback: Apache.org Hacked Using Remote SSH Key | Darknet – The Darkside

  3. Pingback: Apache Website Owned! | SecTechno

  4. Pingback: Twitter Trackbacks for Apache SSH Key compromised » CounterMeasures [trendmicro.eu] on Topsy.com

    1. Rik Ferguson Post author

      Thanks Carter, I agree about the math CAPTCHA, but honestly it cut my Spam trashing workload by at least three quarters, that’s enough time for at least two beers, and in my world, that’s a good thing :)

      Thanks for reading the blog!


Leave a Reply

Your email address will not be published. Required fields are marked *


This site uses Akismet to reduce spam. Learn how your comment data is processed.