Re: Linux machine hit by ransomware
- To: debian-user@lists.debian.org
- Subject: Re: Linux machine hit by ransomware
- From: Kamil Jońca <kjonca@o2.pl>
- Date: Mon, 07 Jul 2025 08:46:35 +0200
- Message-id: <[🔎] 874ivoxzuc.fsf@alfa.kjonca>
- In-reply-to: <L5Kff-fMlm-1@gated-at.bofh.it> (Rick Macdonald's message of "Mon, 07 Jul 2025 05:00:01 +0200")
- References: <L5Kff-fMlm-1@gated-at.bofh.it>
Rick Macdonald <rickmacd@shaw.ca> writes:
> I apologize for the length of this question.
>
> After running Debian for nearly 30 years (and other distros prior to
> that), my Linux server has been hit by a ransomware attack about 11
> days ago. I have backups, so nothing important has been lost at this
> point. However, I can't figure out how it got in, how it works, if
Maybe I oversight something, but can be the case that your home dir was
exposed by samba to other windows machine and ransomware is run on that
windws machine?
KJ
--
http://wolnelektury.pl/wesprzyj/teraz/
First law of debate:
Never argue with a fool. People might not know the difference.
Reply to: