From: DayZ Staff <staff@dayzmod.com>
Date: 9 June 2012 14:04
Subject: Server Hosts - Security Issue
To: dayztech@googlegroups.com


Hello Everyone,

I sadly regret due to the actions of DayZ Management, someone has wrongfully brought someone onto the Server Admin team that has either used his access to spread a 'Bot' around the servers or has given someone else the access.

Due to this access to all of DayZ Staff has been revoked till we can further investigate.

Now you're probably thinking 'what does this have to do with us' well sadly hosts who have given us RDP access may be compromised and very well be used as a botnet.

I want to apologize in advance and I am truly sorry if your server has fallen victim to this security breach and will say with certainty that our management is going to change on how we handle servers.

What I need is all the server hosts who have gave us RDP access and are still valid login details to scan your server checking for any suspicious processes (exes) running as the RDP account you gave to us.

Usually viruses and botnets can be located in the accounts AppData folder under Roaming. It's recommended that you scan the Appdata directory for any .exe's floating in there with obvious names such as explorer.exe etc and change the RDP's account password revoking any access that we may have until we can sort everything out.

It's recommended the hosts do this so that trust can be rebuilt but if asked I will personally go through the server and look for any malware that may reside on the server.


Again, I deeply apologize for this but it's lead to believe a new server admin that was brought on while most of the team was away has used his access to gain a strong botnet.

If you receive any emails from anyone saying that they are with the DayZ Dev Team and the names are not mine or Ander's or Matt Lightfoot then do not respond. We will not ask you for your servers new RDP passwords for when you change them.

/tonic
-- You received this message because you are subscribed to the dayztechlist group. To post to this group, send email to dayztechlist@googlegroups.com. To unsubscribe from this group, send email to dayztechlist+unsubscribe@googlegroups.com. For more options, visit this group at https://groups.google.com/d/forum/dayztechlist?hl=en