zlacker

[return to "I got hacked: My Hetzner server started mining Monero"]
1. heavys+Ab[view] [source] 2025-12-17 22:15:07
>>jakels+(OP)
I wouldn't trust that boot image or storage again, I'd nuke it for peace of mind.

That said, do you have an image of the box or a container image? I'm curious about it.

◧◩
2. jakels+ac[view] [source] 2025-12-17 22:17:19
>>heavys+Ab
Yeah I did consider just killing it, I'm going to keep an eye on it for a few days with a gun to it just in case.

I was lucky in that my DB backups were working so all my persistence wax backed up to S3. I think I could stand up another one in an hour.

Unfortunately I didn't keep an image no. I almost didn't have the foresight to investigate before yeeting the whole box into the sun!

[go to top]