I just ran the top command on my ubuntu EC2 instance.
I saw that there is a process named .chopshop that use 300% of my cpu.
I killed it, but how do I know what the process is and how do i prevent it from re-running ?
Asked
Active
Viewed 173 times
1
-
Possible duplicate of [How do I deal with a compromised server?](https://serverfault.com/questions/218005/how-do-i-deal-with-a-compromised-server) – Apr 26 '17 at 19:15
-
@yoonix why do you think it has been compromised ? – Asaf Nevo Apr 26 '17 at 19:19
-
Maybe it's https://github.com/MITRECND/chopshop ? – adiuva Apr 26 '17 at 19:37
-
@adiuva I also thought about it just didn't know where could it come from – Asaf Nevo Apr 26 '17 at 19:39