Uh has anyone seen this.. hijacked my server.

Discussion in 'General' started by Joseph Holland, Aug 24, 2017.

  1. Joseph Holland

    Joseph Holland New Member

    Has anyone seen this one?

    l
    Welcome to Ubuntu 16.04.2 LTS (GNU/Linux 3.19.0-25-generic x86_64)


    System information as of Tue Aug 22 09:50:28 CDT 2017

    System load: 0.08 Swap usage: 100%
    Usage of /: 10.4% of 125.99GB Processes: 157
    Memory usage: 92% IP address for eth0: 208.79.10.215



    *** System restart required ***

    The programs included with the Ubuntu system are free software;
    the exact distribution terms for each program are described in the
    individual files in /usr/share/doc/*/copyright.

    Ubuntu comes with ABSOLUTELY NO WARRANTY, to the extent permitted by
    applicable law.

    ****************************************!WARNING!******************************* *****************
    ******************************YOUR SERVER ARE INFECTED************************** *****************
    *******ALL YOUR DATABASES, SITES AND USERS HOME DIRECTORIES HAVE BEEN ENCRYPTED* *****************
    ================================================================================ =================
    YOUR UUID IS : AJGSJBCJ23872jkJKSDA3928273892347672364872637846287346872384
    ================================================================================ =================
    If you want to restore your files, send your UUID to e-mail: nina.edge.1979@mai l.ru
    You have to pay for decryption in Bitcoins. The price depends on how fast you wr ite to
    us. After payment we will send you the decryption tool that will decrypt all you r files.

    FREE DECRYPTION AS GUARANTEE
    Before paying you can send to us up to 1 files for free decryption.
    Please note that files must NOT contain valuable information
    and their total size must be less than 1Mb

    ******************************************************************************** *****************
    ******************************************************************************** *****************
    ****************************************!WARNING!******************************* *****************
    To run a command as administrator (user "root"), use "sudo <command>".
    See "man sudo_root" for details.
     
  2. Jesse Norell

    Jesse Norell ISPConfig Developer Staff Member ISPConfig Developer

    I haven't, but am more curious about it - where is it you see that message? Do you have actual data loss / encryption, or just that threat message?
     
  3. Tuumke

    Tuumke Active Member

    :O Holy mess, cryptolocker for unix? shiiiiiit
     

Share This Page