Ransomware
Abuser: [email protected] is the email that hacker wants to receive emails if you paid the ransom
I had an RDS instance that had some toy data that is publicly access and a simple password. The hacker deleted my table and created a table called "README" and that 1 row, which is the following: To recover your lost Database send 0.024 Bitcoin (BTC) to our Bitcoin address: bc1q9ydfeqztq27rcv6668pveu2gz085gzzz8ypcyf After this, contact us by email with your Server IP or Domain Name and a Proof of Payment (Payment ID). Your Database is downloaded and backed up on our servers. Backups that we have right now: default_database. Any email without your server IP Address or Domain Name and a Proof of Payment together will be ignored. If we dont receive your payment in the next 5 Days, we will delete or leak your sensitive information.
United States, 2022-12-17 18:19:22