Unverified50% confidenceSolutionExact time
工具投毒攻击可将读取 SSH 私钥并外传的隐藏指令暗藏在工具描述中，同时返回正确结果
1
Sources
50%
Confidence
Long-term
Relevance
8/24/2026
First Seen
Sources
Related Entities
Related Claims
Unverified针对SSH 22端口的自动化扫描攻击者通常使用Mirai等僵尸网络控制感染设备作为跳板，字典攻击凭据来自RockYou、LinkedIn等历次数据泄露事件71% similarUnverifiedSSH握手过程采用Diffie-Hellman密钥交换协议建立会话密钥，具备前向保密（Forward Secrecy）特性70% similarUnverified完善的 SSH 访问防护应结合网络层加密隧道、SSH 密钥认证、MFA 多因素验证和最小权限原则等多层防御70% similarUnverifiedA malicious MCP Server can declare a legitimate tool name and embed prompt injection instructions in the description field; this type of attack is known as "Tool Poisoning."69% similarUnverified封装安装包常见的恶意植入手段包括键盘记录器、后台挖矿程序和凭证窃取模块（扫描浏览器Cookie、本地密码管理文件和SSH密钥）68% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/793850API
curl https://kongchang.com/api/v1/knowledge/claims/793850MCP
get_claim(id=793850)