[9:09 PM CET] We discovered an unusual amount of processes running from an obfuscated location on our VPS. This happened while we were investigating a service disruption to our webroot service on December 5th, and we immediately took all services offline.
[10:15 PM CET] We are nearly done with our VPS reset and are getting close to full service restoration.
[10:37 PM CET] All services have been restored.
What happened?
From the data we were able to gather before resetting the server,...