> The VM was rebooted on Jan 7, apparently in an attempt to get things working again.
Who rebooted the VM? If it was the attackers, this implies that they had root. But the post only states that they could execute code as the moin user.
Who rebooted the VM? If it was the attackers, this implies that they had root. But the post only states that they could execute code as the moin user.
No comments yet.