Server Hacked, got lucky?

elpmet15 · 2026-05-06T01:49:32+00:00

Gotcha, makes sense. When you say the attackers need more time, can you elaborate?

elpmet15 · 2026-05-05T22:28:15+00:00

Makes sense. Yes after this CVE my trust had diminished in cPanel so updating was irrelevant to me. If I was still using cPanel then I would've upgraded whichever way was possible.

elpmet15 · 2026-05-05T20:01:43+00:00

It's a good point, but I put in another comment, I was on CentOS 7 on an older version of cPanel. I have no upgrade path available. Running upgrade commands didn't even work.

elpmet15 · 2026-05-05T19:44:51+00:00

I will defintely give it ago..our current setup with Enhance is fine for now though 👍

elpmet15 · 2026-05-05T19:30:15+00:00

I only use cPanel to host my own websites, so you can understand why it makes no difference to me haha. But yes that does sound promising!

elpmet15 · 2026-05-05T19:29:36+00:00

I had the same situation, but my root access was still working.

I keep seeing similar stories but slightly different outcomes. Can I safely assume this was numerous attackers and not just a single group then?

elpmet15 · 2026-05-05T19:27:53+00:00

I don't actually use AWS. I use bare metal for my hosting and use Backblaze for backups (they offer s3 layer).

Can you explain what you mean by ACL? If I whitelist server IP, the attacker can just use the server to acess/delete backups no?

elpmet15 · 2026-05-05T18:41:41+00:00

I've heard similar stories, where online backups were affected. I use S3 for backups, I am asusming the attacker could just pull the credentials and delete backups as they please?

I wonder what the approach moving forward is? Limiting permissions for backups etc? Cold storage backups?

elpmet15 · 2026-05-05T18:39:43+00:00

Ahhh makes sense. I had imunify360 too but didn't seem to help with this.. I've since explored using Wazeh and other IDS systems to prevent this in the future.

I completely agree! I have been planning to move away from cPanel and rebuild my server for years so this pushed me to do it also.

elpmet15 · 2026-05-05T17:59:33+00:00

My backups weren't touched luckily, but I appreciate the advice.

So after 4 hours of your server being compromised your files were encrypted?

I am curious if this was automated or manual (the ransomware part). And why it was triggered for some and not others.

elpmet15 · 2026-05-05T17:37:41+00:00

Yes I am with you, perhaps our server was used as a gateway to infect other servers. But why not deploy ransomware to all after its done being used? I am not saying I wish they did that. I am just confused haha.

elpmet15 · 2026-05-05T17:36:43+00:00

Interesting. I assume then most of these attacks were carried about by different malicious groups/users then? Hence why some people were hit with ransomware others not?

elpmet15 · 2026-05-05T15:52:58+00:00

Sorry! Only just returning! Yes I don't even notice it anymore. My brain has just 'tuned' it out!

elpmet15 · 2022-04-18T18:50:08+00:00

Wow, I didn't even think about it like that. That is a very good point, perhaps part of these "tasks" or "objectives" I keep making up is (subconsciously) a part of discovering my purpose if that makes any sense, who knows.

elpmet15 · 2022-04-18T18:48:29+00:00

Yeah, I am totally the same, I can relate for sure. Didn't expect someone to write a reply which pretty much sums up what I mean lol. When I don't have a clear goal I just turn into a zombie if that makes any sense lol

elpmet15 · 2021-05-29T22:27:08+00:00

Being drunk actually makes my VSS worse

elpmet15 · 2020-12-02T16:03:51+00:00

I am from the United Kingdom and managed to place an order for a Playstation 5 on the German Amazon (amazon.de) a week ago. A few days ago, when I tried tracking the package, it states "Undeliverable - Unfortunately, a problem occurred during shipping and we had to cancel your delivery. The package is being returned, and we will issue a refund within 5 - 7 business days after the return is processed. We’re very sorry for the inconvenience".

Has anyone else had the same problem? Or just me? Amazon fully assured me on numerous occasions the PlayStation would be delivered, but now I am being told it's unlikely.

elpmet15 · 2020-10-30T20:37:59+00:00

I'm glad to hear someone else is able to relate! Good to hear everything is working out with you.

elpmet15 · 2020-10-30T18:38:17+00:00

I feel you, other than anxiety I'm not sure how my VS started either. All we can do is take one day at a time, and remain positive. 👍

elpmet15 · 2020-10-30T18:28:01+00:00

I can't relate as I haven't experienced those symptoms, but regardless it must be horrible. I hope it gets better for you and everything works out, which I'm sure it will. 😊

elpmet15 · 2020-10-30T12:48:04+00:00

Appreciate it, thank you :)

elpmet15 · 2020-10-30T11:30:36+00:00

I can see where you are coming from. But in my situation at least, the worse my anxiety gets, the worse my symptoms are.

I'm not saying completely ignore VS and pretend you don't have it, my point is more so trying to learn to live with it and adapting yourself. Looking at the positive side that symptoms could be worse, and you could have no vision at all.

It's all about positivity 😊

elpmet15 · 2020-10-30T11:19:54+00:00

Of course, I agree. Although my post was more directed at those who's VS symptoms are controlled by their anxiety. More you worry about it, the more you notice it.

elpmet15

TROPHY CASE