Skip to content
Register

The security scare that was just my own keylogger

General Discussion by Nadia59 22 replies 2K views
Nadia59

Member OP

11 #1

So I wake up and my server is just gone right all files encrypted weird processes running im panicking I think ive been owned so I start wiping everything changing passwords calling my provider at like 3am im freaking out right and then I notice the keylogger process has the same name as this cracked server panel I downloaded last week from some discord and im like oh no oh no no no and sure enough it was me I infected myself with my own sketchy download I feel so stupid right now has anyone else done this or am I just the biggest idiot in hosting

readerkrakw

Member

Backup Paranoid

#2

Nadia59 said:
Has anyone else done this or am I just the biggest idiot in hosting
Bro I did the exact same thing with a cracked Plesk license lol the keylogger was logging my own ssh keys and sending them to a pastebin you are not alone there

engzur

Member

BGP Dreamer

#3

AS64512 prefix hijack of your own machine. RFC 2827 ingress filtering wouldnt help here since the threat originated inside your AS. Diagram:

[You] --(trust)--> [Cracked Tool]
| |
+----(compromise)------+

Any ASN in your whois? No? Then youre just a prefix squatter crying about self-inflicted route leaks. Get a real netblock.

YU

Member

#4

I downloaded a free control panel last month and now im worried!!

lucgone

Member

Le Baguette

#5

Is normal actually I make the same in 2019 with a cracked cpanel friend I install in the server and the keylogger steal my own passwords how much hours you lose or what I lose actually three days of sleep

Vive la résistance... électrique
minh1987

Member

#6

Self-own is still an own.

phở at 3AM, deploy at 4
YU

Member

#7

Nadia59 said:
I infected myself with my own sketchy download
What panel was it if you dont mind me asking I got mine from a turkish forum and now im scanning everything

Nadia59

Member OP

#8

yukirom said:
What panel was it
Some "free" version of aaPanel I think it was called looked legit enough but the discord link was dead in like two days should have been a clue

lucgone

Member

Le Baguette

#9

Nadia59 said:
AaPanel
I dont know this one in 2019 it was cpanel for me but the story is the same the crack come with a gift you know

Vive la résistance... électrique
readerkrakw

Member

Backup Paranoid

4 #10

This is why I run everything in Proxmox snapshots now. Infect yourself? Roll back. Sleep.

Post a reply

You need an account to reply. Log in or register to join the conversation.

Post reply Preview Save draft