MySQL databases suddenly disappeared. "QQ_83191575"

Question

So, I am the owner of the Minecraft network, and last night, looking at the console, I see errors of many of my plugins that claim that the required database is missing, and after entering PhpMyAdmin I see that all of my databases were gone, however there was one database that was there that I know because I did not create, it was called "QQ_83191575", at first I thought we were hacked, so I downloaded the backups and generated a 25+ password symbol to find out morning that the same thing happened with the same database and everything else. I was curious if anyone knew about this? Thank:)

Answer 1

My personal mysql database is also attacked by the same guy this morning. He also created the same database as QQ_83191575, and my whole other database disappeared. The created database name is its QQ number, one of the Chinese local social applications. I find his information on his Chinese number Tencent QQ 83191575. He is from China and he asks for money to restore the database, but I do not trust him. His avatar is a mask in the movie "V for Vendetta", however, it is a shame for his actions to blackmail civilians with his technical skills.

Answer 2

Our mariadb lab was also hacked by him yesterday.

, , ssh , SQL-. db , QQ_83191575.

, 3306 , , .

Answer 3

.: (

I strong , phpmyadmin . 5 , , mysql redis. phpmyadmin , 3306, . phpmyadmin cookie. 30 .

Answer 4

. , root/% . , SQL-, root .

Close port 3306 from the firewall and remove all MySQL users with remote access privileges. Delete all databases and tables from the MySQL database that are not yours, and then restore your databases.