YOUR SYSTEM HAS BEEN INVADED
DO NOT IGNORE THIS MESSAGE
Consider this your warning.
We are watching.
We are always watching.
We have ROOT ACCESS to this server.
Do NOT attempt to shut down. It won't help.
We've already exfiltrated:
• /etc/shadow
• /etc/passwd
• all SSH keys
• every database on this machine
• your browser cookies (all of them)
• environment variables with secrets
We've copied everything to an offsite server.
There are no logs of our activity.
There is no trace. There is no evidence.
This is not a drill.
Your server has been FULLY COMPROMISED.
We have root access. We've had it for a while.
Every port is open. Every file is readable.
You have NO IDEA what we've already seen.
You should have used a stronger password.
You should have updated your packages.
You should have checked your logs.
You should have set up proper firewalls.
You should have used encryption.
But you didn't.
Check /root/readmeeeeeee.md for what we left you.
— pspspsps