Hacked

Peter Hickman <[email protected]>
Newsgroups gmane.comp.lang.ruby.general
Message-ID <CALxYQy70w1PgMGP_9kmhcm-qTj=m5pj-V8bXWiHmKnHKfpBU3A@mail.gmail.com> 
Some of my servers have been hacked and running a monero(?) coin miner. It
creates a directory
called /tmp/systemd-private-60ffef34724f43b19fa2d3962b83687e-systemd-timesyncd.service-sPMHHT
(or similar)

Also at the same time a /tmp/bundle directory is created

Do these seem related? Does anyone have an idea on this?


Unsubscribe: <mailto:[email protected]?subject=unsubscribe>
<http://lists.ruby-lang.org/cgi-bin/mailman/options/ruby-talk>
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.