search for: securelist

...il list I think that would be a good idea. >From what I have read this morning it appears to be an APT, should know more in the coming days and weeks but most times with APT's details will be slow coming. Here are some sites that you may want to look at: http://krebsonsecurity.com/ http://securelist.com/blog/research/ http://www.csoonline.com/author/Steve-Ragan/ http://blog.crowdstrike.com/ This one will be interesting in a few weeks: http://www.csoonline.com/article/2880095/cyber-attacks-espionage/crowdstrike-demonstrates-how-attackers-wiped-the-data-from-the-machines-at-sony.html

(Sorry, third time -- last one, promise, just giving it a subject line!) OK, a second machine hosted at the same hosting company has also apparently been hacked. Since 2 of out of 3 machines hosted at that company have now been hacked, but this hasn't happened to any of the other 37 dedicated servers that I've got hosted at other hosting companies (also CentOS, same version or almost),