Observed SSH Authorized Key Redirection Attempt
SGI detected an attempt to inject an unauthorized SSH key. This could lead to unauthorized system access. Immediate review and remediation are advised.
Emerging Threat: SSH Key Injection via Compromised Web Servers
SGI observed attempts to inject SSH keys by redirecting requests to malicious authorized_keys files. Potential impact: unauthorized system access.
Compromised SSH Keys via Web-Delivered Payload
SGI observed a potentially compromised SSH authorized_keys file originating from a Singapore-based IP. The file exhibits characteristics of a credential harvesting campaign targeting various user accounts.
Compromised SSH Authorized Keys via Suspect IP
SGI observed an IP address injecting unauthorized SSH keys. This could allow attackers persistent access to affected systems. Immediate review advised.