If you downloaded Linux Mint on Saturday, attackers might have a back door on your computer.
“Hackers made a modified Linux Mint ISO, with a backdoor in it, and managed to hack our website to point to it,” Clement Lefebvre, one of Mint’s creators, wrote in a blog post over the weekend (via Ars Technica). The post also recommended anyone running the corrupted system totally wipe their systems and change all of their online passwords.
The attack is specific to Linux Mint 17.3 Cinnamon edition, and only applies to people who downloaded that ISO from the website: BitTorrent users aren’t affected, and neither are Mint users who updated from previous versions using apt-get or other methods. But if you downloaded a Cinnamon ISO from the Mint website on Saturday, February 20, Lefebvre recommends taking action immediately.
“Delete the ISO,” Lefebvre wrote. “If you burnt it to DVD, trash the disc. If you burnt it to USB, format the stick.”
And if you actually installed the corrupted Mint version? The steps are even more severe. To quote Lefebvre, users should:
If you want to know if you’re infected, the blog post offers valid MD5 signatures for the installation ISOs.
It’s not known who carried out the attack, and what motivates the attackers, but the hacked ISOs were hosted by a server in Sofia, Bulgaria.
It hasn’t been a great couple of months for Linux’s security reputation. In December a bootloader bug revealed at a Polytechnic University Cybersecurity Group showed that you can hack most Linux distros by hitting the backspace key 28 times.
“If more efforts are made to attack our project and if the goal is to hurt us, we’ll get in touch with authorities and security firms to confront the people behind this,” wrote Lefebvre.
Every operating system has its share of vulnerabilities, and it’s good that Mint’s were noticed early. Here’s hoping the Mint team can get everything under control before any more corrupted ISOs are distributed.
Related Posts
The rise of adaptive displays: How Lenovo is redefining productivity & play
"If you look at the history of displays, they have always been passive surfaces that simply rendered whatever the device sent to them," says George Toh, Vice President and General Manager of Lenovo’s Visual Business Unit. "What is changing now is that screens are becoming adaptive interfaces that react to what the user is doing in real time.”
Here’s what happened to your Gmail inbox over the weekend
Gmail features a sorting system that automatically moves fluff like newsletters, promos, and non-urgent updates into separate tabs, keeping your Primary inbox clean and focused on what matters. On Saturday morning, this system stopped working as expected. Instead of organizing emails, Gmail dumped all incoming emails into the main inbox, and some users even saw warnings that certain emails had not been scanned for spam.
Your iPhone’s Siri upgrade may be tied to iOS 26.4
The upgrade is supposed to move Siri past simple voice commands and generic answers. The assistant should be able to draw on personal data and what’s on your screen to complete tasks, which is the kind of everyday help Apple has promised for years.