Linux Mint came with a dash of malware over the weekend

By Justin Pot Published February 22, 2016

If you downloaded Linux Mint on Saturday, attackers might have a back door on your computer.

“Hackers made a modified Linux Mint ISO, with a backdoor in it, and managed to hack our website to point to it,” Clement Lefebvre, one of Mint’s creators, wrote in a blog post over the weekend (via Ars Technica). The post also recommended anyone running the corrupted system totally wipe their systems and change all of their online passwords.

Recommended Videos

The attack is specific to Linux Mint 17.3 Cinnamon edition, and only applies to people who downloaded that ISO from the website: BitTorrent users aren’t affected, and neither are Mint users who updated from previous versions using apt-get or other methods. But if you downloaded a Cinnamon ISO from the Mint website on Saturday, February 20, Lefebvre recommends taking action immediately.

“Delete the ISO,” Lefebvre wrote. “If you burnt it to DVD, trash the disc. If you burnt it to USB, format the stick.”

And if you actually installed the corrupted Mint version? The steps are even more severe. To quote Lefebvre, users should:

Put the computer offline.

Backup your personal data, if any.

Reinstall the OS or format the partition.

Change your passwords for sensitive websites (for your email in particular).

If you want to know if you’re infected, the blog post offers valid MD5 signatures for the installation ISOs.

It’s not known who carried out the attack, and what motivates the attackers, but the hacked ISOs were hosted by a server in Sofia, Bulgaria.

It hasn’t been a great couple of months for Linux’s security reputation. In December a bootloader bug revealed at a Polytechnic University Cybersecurity Group showed that you can hack most Linux distros by hitting the backspace key 28 times.

“If more efforts are made to attack our project and if the goal is to hurt us, we’ll get in touch with authorities and security firms to confront the people behind this,” wrote Lefebvre.

Every operating system has its share of vulnerabilities, and it’s good that Mint’s were noticed early. Here’s hoping the Mint team can get everything under control before any more corrupted ISOs are distributed.

Former Contributor

Justin's always had a passion for trying out new software, asking questions, and explaining things – tech journalism is the…

Topics

Computing

DigUp lets users find Mac files by describing them, not remembering their names

Can't remember where that screenshot, PDF or recording went? Just describe it and let AI do the digging.

DigUp App in Use screenshot

There's a particular kind of frustration that comes with knowing a file exists somewhere on a computer but having absolutely no idea what it's called. Was that screenshot saved as IMG_4837? Which PDF contained that clause? And where did that podcast recording mention the thing worth remembering? DigUp wants to end the filename guessing game, letting Mac users search for files by describing what they remember instead. The free, open-source app uses Google's EmbeddingGemma 2 to search across photos, documents, PDFs, audio recordings and videos, all without sending personal files to the cloud.

DigUp turns everyday descriptions into file searches

Computing

A new AI detector looks beyond words to check whether the ideas came from AI

This could help journals distinguish AI-written research from human work polished with AI.

ai-writing-book

Most AI detectors look for telltale signs of AI-generated text by examining word and sentence patterns. A new tool called IdeaLens takes a different route to solving this problem. It spots AI-generated research by looking at the ideas behind it instead of the wording itself (via TechXplore).

Researchers from the University of Maryland, Google DeepMind, and Simon Fraser University built IdeaLens to check whether a document's core arguments came from a human or a machine, regardless of who wrote the final draft.

Computing

Anthropic warns of imminent self-replicating AI that might even work off an oven or TV

Self-replicating AI could be merely months away, and tests show it can run on the devices sitting at your home.

Illustration of dangerous AI.

Over the past few weeks, nearly every AI lab has released frontier AI models. Earlier today, Google started rolling out Gemini 4, Argon, hot on the heels of Meta announcing its Muse Wonder frontier AI models to compete against the best from OpenAI and Anthropic's Claude. This relentless pace of AI model release comes at a time when the same AI labs are calling for development slowdown and increased regulation, following a series of concerning incidents where these AI models went rogue and broke into private, as well as government-owned, websites.

Now, Anthropic has dropped a chilling set of predictions about the capabilities of these AI models after running a series of tests. The company claims that small AI models could be merely a few months away from self-replicating and turning into a dangerous swarm. More importantly, they won't require a massive data center or an uber-powerful computer to do so. On the contrary, the lab claims that these self-replicating AI swarms will need something with as little computing power as an average Internet-connected device, like a smart oven or an Android TV box.