[0] https://arstechnica.com/information-technology/2013/09/who-r...
This bit makes it sound like 3 letter agencies were involved?
Who is also in the Panama Papers... https://offshoreleaks.icij.org/nodes/12097929
So who was GoDaddy? Not NSA for sure. They call it the Ebury group and they do have some hints
> Occurred no later than August 12, 2011, and wasn't detected for another 17 days
which also had a discussion on HN in 2013:
Who rooted kernel.org servers two years ago? (https://news.ycombinator.com/item?id=6438326) - Sep 2013 (45 comments)
The article from ESET is here,
Ebury is alive but unseen: 400k Linux servers compromised for cryptocurrency theft and financial gain (https://www.welivesecurity.com/en/eset-research/ebury-alive-...) - May 2024
but the article itself only serves as an introduction to the PDF:
https://web-assets.esetstatic.com/wls/en/papers/white-papers...
> A 47-page report summarizing Ebury's 15-year history said that the infection hitting the kernel.org network began in 2009, two years earlier than the domain was previously thought to have been compromised.
I think you grok that, but I don't think the title is clickbait.
