search

flightaware / piaware

Client-side package and programs for forwarding ADS-B data to FlightAware
BSD 2-Clause "Simplified" License
499 stars 71 forks source link

Possible Security Breach. #56

Closed mrbreenhd closed 5 years ago

mrbreenhd commented 5 years ago

Hello, ive been running piaware for just over a year and have only installed what I needed to run my pi. Recently ive installed mysql with phpmyadmin for localhost use only. Less than a day of having it installed I had noticed my tables were gone and replaced with 1 table for ransomware.(what ever it wasn't important) but of course im a bit on edge on what caused it.

Now of course I am not saying that it was caused by piaware but seeing as its the main os for my pi I thought id make a note of this and seek some help/advice on what to do.

mutability commented 5 years ago

Given the timing, the more likely explanation here is an insecure install of mysql or phpmyadmin. The piaware sdcard image exposes almost no services by default.

(I would need a detailed description of your system, what changes you made, and post-compromise forensics to really be able to do anything here, anyway)