When SSHD is listening on all network adapters, which is its default setting, it can cause issues when running SSH tests. If you want to test for Medusa and similar malware, you may need to update the SSH Configuration on the OS of your Actor so SSH is only listening on the management interface.
NOTE: This is only applicable if your Actor is installed on a system that runs an SSH server.
To update the sshd_config file
- Using Root, connect to the Operating System your Actor is installed on.
Run the following command:
$ vi /etc/ssh/sshd_config
Add the following line and save the file:
ListenAddress management interface IP address
Use one of the following commands to restart SSH:
$ # /etc/init.d/sshd restart
$ # service sshd restart