[PRL] Galicia Compromised

[Leif Andersen]

Just one last follow up:

It turns out its not Heather and Christopher, and we still believe its
not compromised. We are planning on wiping it by the end of the week.
So this is your last call to request backups.

~Leif Andersen


On Wed, Jun 13, 2018 at 4:33 PM, Leif Andersen <leif at leifandersen.net> wrote:
> FYI everyone, we believe Galicia has been compromised. I will be
> re-installing in a few days. If you have any files you need me to
> rescue before I wipe it please let me know ASAP.
>
> Apparently the machine started making a couple million outgoing SSH
> connections today at 3 or so. So....
>
> Heather, if y'all were the ones responsible for that, do please let us
> know so we can restore the system for you. :)
>
> ~Leif Andersen