International research team from MPI for Informatics and TU Delft has detected more than 16,000 compromised servers using a subtle feature of the SSH authentication protocol. Published at USENIX Security Symposium 2025, won Distinguished Paper Award + Internet Defense Prize. ↪️ sic.link/catch22