As some have realised, ALL gaming servers including our teamspeak is DOWN.

What happened?

When I saw a post today on the shoutbox if the TS is down, I logged in into the server where everything is hosted and noticed ALL FILES AND FOLDERS had an unknown extension and filename. Everything was encrypted. See photo attached.

Each directory had a notepad file with the following text:

The file is encrypted with the RSA-2048 algorithm, only we can decrypt the file.
====================================================================================================
                    777@8chan.co
====================================================================================================
Your files are encrypted!
Your personal identifier:
6A0200000000000049DF5ED915928911C34008035BE217F4DFD8ED65E28C7316202D36774DB74DAF6F6EB95929B2563556E7
E22F67D93E85C0C62BE477C82AAEA347114AB7E63B685A57D3FACDD2324C3631D17597C73576568E646A3CFA52397B0CF7B5
D5716271B9E36EDEFD9F2DC3E7A2FA2840DA1374A9B9F599F30BEF34D3667617151C5CB9AEF1BCB8AB486E170F667BE796EB
21CBACF41C061D257D2271EA5B594DF2B98B7F14BDEA5A9EA1DDB0A1348A58BEBD9D98EDA265E5863496B743568728971BC6
A9ACAEF29A0498DD800B709F0E481772B363782731931593CB2D7DD3254FC848071D8C1F3FC3E009A3F0ABEFB3D8BF973FF3
A40E3633D7B767431F7816ACB1566A11AF4942016B7708193E80DAFE5DB39A66508CB4753F189C88044C53C57795152542A2
6084B1D9E23DB94AF26A70CB4A50019DB74AE1E1FAAAA807
====================================================================================================
To decrypt files, please contact us by email:
777@8chan.co
====================================================================================================
The file is encrypted with the RSA-2048 algorithm, only we can decrypt the file.

When I messaged Gilly  @AAAAAkAAAAA who is always willing to help me with anything, and is also like the co owner of TW, he logged in remotely to TW host and immediately figured out what happened. I had to leave the building to report to work so he was trying to figure out what's the safest thing to do remotely while I made it to work. At this point, all the files are affected on the machine, and even more terrifying, all external drives (14TB of data ) may have been corrupted. I would only know at morning when I return to the building to face one of my ultimate fear.

A system restore was attempted, but the machine is off atm so until Im back at the building, then I can restart the machine and take things from there. 

How this happened? I have no idea. Only things I downloaded were maps from the forum someone posted, a youtube sinusbot plugin update and some other settings I changed with remote access.

When will TW servers be back? I don't know. I have a backup of our Promod server only, but not the deathrun and zombies. Worst case scenario is to host from another machine if this problem can't be fixed.

Do I know how to fix it? No. This is beyond my knowledge, and the only help I have in saving the servers is from @AAAAAkAAA

My greatest fear? If the external drives were affected  ( which includes my work and university documents and everything backed up for 6 years) . I have no idea as yet what's the situation, which is terrifying to even think about. Ill only know when Im back at the building to check.

At this point, @AAAAAkAAAAA and I are doing our best and try and save and fix our servers and all data that was affected.

If anyone else have any advice or would like to assist us, that would be greatly appreciated and would be greatly rewarded.

 

Thanks for understanding. Much love from

- [TW]Staff