Five of the eight main Ubuntu servers were manually stopped when they launched a powerful attack on other servers on the Internet. Obviously, Ubuntu hardware has become a tool in the hands of some intruders.
Ubuntu's sponsor, Canonical , blames the community for Ubuntu activists who have hacked servers (the other servers are in the Canonical data center and everything is fine). An investigation has shown that the “public” machines did not perform the proper software upgrade. However, activists respond that the kernel upgrade on the servers was impossible, because it was allegedly not supported at the hardware level (non-standard network cards). That is to blame the company Canonical, which provided the "wrong" card.
Hacked servers worked on the old version of Ubuntu from October 2005 (Linux kernel 2.6.12.6). The servers did not have the latest security patches installed, and pure FTP was enabled (without SSL). It was through FTP that intruders entered the system.