This encrypts first 512MB of the disk with randomly generated key and sends the data to attacker's server.

(Quote)

Quite a lot of data might well be recoverable as the contents of the disk between the first and the last 512MB is left untouched.

(Quote)

What it does it zeros the Boot header it seems. just making the disk image unable to boot. While data is intact. I tried to make a script to extract data out of the image and send it elsewhere to back

From ~10PM GMT 30/1 the average disk waiting time was pretty constant at just over 500ms up to the point my machine disappeared and there was a shorter spike around 8PM GMT 25/1, so maybe they were ex

CloudCone just replied to the ticket:

Also interesting is that the CPU spiked to 25-30% for just over 5 minutes before it went offline, and 15-20% CPU steal during the same period. Disk average waiting time started spiking about 15 minute

EnabledRAM : 967.9 MiBSwap : 0.0 KiBDisk : 9.9 GiBDistro : Debian GNU/Linux 13 (trixie)Kernel : 6.12.63+deb13-cloud-amd64VM Type : KVMIPv4/IPv6 : ✔ Online / ❌ OfflineIP

Will be used to temporary store almost 30TB data.

OS Disk: 1 × 100 GB SSD

Disk: 1 TB is enough, must be Gen4 NVMe

(Quote)

But the price also is Cheap. remember that RAM, Disks are increasing.

🔹 10Gbps Port Speed*

* 8 TB @ 10 Gbit/s ~or~ Unlimited @ 250 Mbit/s with daily speed increase (noref)

(Quote)

(Quote)

🔹 10Gbps Port Speed

(Quote)