logoalt Hacker News

egberts1yesterday at 12:46 AM1 replyview on HN

This Monero mining also happened with one of my VPS over at interserv.net, when I forgot to log out of the root console in web-based terminal console to one of my VPS and closed its browser tab instead.

It has since been fixed: Lesson learned.


Replies

tgsovlerkhgselyesterday at 7:21 PM

> when I forgot to log out of the root console in web-based terminal console to one of my VPS and closed its browser tab instead.

This should not enable the compromise of your session, i.e. either there was some additional vulnerability (and not logging out widened the window during which it could be exploited), or the attack was totally unrelated. Either way, you should find out the real cause.