Raspberry PI Virus - WARNING

[stash_old]

Radek has issued this warning and he IS an expert on computer security https://indilib.org/forum/astroberry/7627-raspberry-pi-trojan-going-wild.html

[TerryMcK]

Change your VNC password too.

[JamesF]

I wonder if it might help to ship the image with the password already expired, so it has to be changed on first login.

James

[rnobleeddy]

Unless I've misunderstood, the virus is obtained by leaving SSH open to the internet with the default password.

Clearly the advice to change the password is sensible regardless, but to open your SSH up to the internet requires a conscious choice, and isn't something that I'd imagine most users do.

[vineyard]

Crikey.  Is this an issue for Stellarmate as well then (if you use it as a hotspot rather than connected to your home wifi)?  Sorry, I'm definitely not an IT expert!

[stash_old]

1 hour ago, vineyard said:

Crikey.  Is this an issue for Stellarmate as well then (if you use it as a hotspot rather than connected to your home wifi)?  Sorry, I'm definitely not an IT expert!

Any version (astro or not) on which you use SSH and use a published password that doesn't ,as James said, make you change the password on first login - lots of people never change the default password !

[vineyard]

Ah I don't know if SSH is used on a SMate hotspot connection or not.  Will check on the SMate support forum.  Thanks again!

[vineyard]

I checked in w SM support & Jasem replied.  This is not an issue for SM - phew