9 Replies Latest reply on Feb 16, 2018 12:33 PM by John_K

    Is our EBS Hacked? :(

    Beauty_and_dBest

      EBS R12.2.7

      OL6

       

      Today, the endusers complaints that their java forms has error.

      Capture.PNG

       

      I checked the apps server, planning to stop/start the services, but to my surprise I see lots of processes name "tsm" eating up all cpu and memory resources.

       

      tsm.PNG

      tsm2.PNG

       

      These  "tsm" processes are spawned via the crond process "cryptonight"

       

      Please help if this is a virus in Linux, injected by hackers?

       

       

      Kind regards,

      jc