Ramnode was hacked SolusVM zero day exploit (what should I customer do?)

Question

So, ramnode was compromised, some kid used zero day exploit to gain access and rm -rf.

I'm really happy how ramnode team handled situation, finally my VPS was restored and it is back online.

I've a question, and I need someone with experience to help me out :)

I had root login/account disabled and used SSH keys to login. Ramnode asked us to change root password, but since I used keys should I change keys? or am I fine?

score 1 · Accepted Answer · answered Jun 17 '13 at 11:08

1

A very localized question, but I would definitely re-generate SSH keys.

answered Jun 17 '13 at 11:08

Nathan C

1 Answers1