How to Keep Malware at Bay: Shielding Your Servers

How to Keep Malware at Bay: Shielding Your Servers

Dear gentle reader,

Welcome to today's blog post, graciously sponsored by 1 of 1 Servers, the go-to provider of VPS and dedicated servers with unbeatable DDoS protection for all FiveM hosting, ensuring the smoothest and most secure experience for all players.

I run the above company, as many of you are aware, and I encounter the following issues almost daily:

"Help! My files are gone!" or "My database has vanished!" or even "Everything's in Chinese!" So, what can we do in such situations?

Truthfully, our hands are tied. The most we can offer is provisioning a new VPS for you or reinstalling Windows on your dedicated server, allowing you to begin transferring files.

I'm certain that some of you reading this have faced similar issues, where your VPS or dedicated server was compromised, leaving you with virtually nothing. And if you didn't have a backup? All your hard work is lost.

Here's my advice on measures you should take to safeguard yourself because even seasoned professionals can fall victim to such incidents.

GitHub

Guess what's the quickest route to a VPS party where the uninvited guests are trojans, malware, Cypher, and backdoors? Surprise! It's by RANDOMLY grabbing scripts off GitHub and dumping them into your resource file like you're on a digital hobo hoarding spree. So, before your server turns into a digital dumpster, let's hit pause on the script fiesta and be a tad bit more discerning, shall we? Make sure that you ABSOLUTELY TRUST the author!

Imagine your server as a fashion runway. It needs the right look, a snazzy color scheme, and every outfit (read: script) from GitHub needs tailoring to fit the theme and branding of your grand show! So before you toss any old script into the mix, give it a little makeover so it struts in sync with your server's style.

Halt the practice of developing on your PRIMARY SERVER BOX! Follow my consistent advice: use a separate, smaller VPS for development. This ensures that your main files remain untouched by your development efforts unless you update them through GitHub. It's wise to wait a day or so after updating; most ransomware activates within minutes, allowing you to detect issues promptly. This approach helps you intercept and prevent any malicious software from migrating to your main server.

Tebex

Every single script or FiveM-related item you seek should be bought exclusively from TEBEX. No other options. Zero, zilch, nada. If it's not listed on Tebex, keep your wallet shut! Now, you might wonder why?

Every single script or FiveM-related item you seek should be bought exclusively from TEBEX. No other options. Zero, zilch, nada. If it's not listed on Tebex, keep your wallet shut! Now, you might wonder why?

Every single script or FiveM-related item you seek should be bought exclusively from TEBEX. No other options. Zero, zilch, nada. If it's not listed on Tebex, keep your wallet shut! Now, you might wonder why?

3rd time is the charm.. usually.

Think of Tebex as your best man. If scripts suck and fail, Tebex is there to help you file a claim, potentially even securing a refund. Venture outside of Tebex for purchases? Well, you're on your own, and it might not be pretty. Best of luck!

Tebex keeps a vigilant eye on its sellers. If they're caught in dubious dealings, they face suspension or termination.

Up until this point, I've never come across a script with malware or viruses when it's been sourced from Tebex.

But venturing outside of Tebex for your server purchases? Well, brace yourself and good fucking luck—you'll probably need it.

Pre-made Frameworks

STOP BUYING THIS GARBAGE! What you're getting is just a jumble of free scripts wrapped up in one seemingly neat package. And surprise – they're MORE THAN FLAWED. Overflowing with glitches, errors, blunders, and misconfigurations. And the cherry on top? Yup, it's laced with trojans and backdoors!

Be particularly wary of a seller named NcHub. His pre-made frameworks come with a side dish of not one, but around FIVE backdoors. If you've bought from him, it's high time to ditch it. He's a known offender, having been shut down by both Tebex and FiveM themselves. Beware!

And as for Fiverr... for the love of all things digital, STAY THE FUCK AWAY! It's a minefield of scammers and folks who frankly have no clue about what they're doing.

QBCore, ESX, and other major frameworks are absolutely free. Don't look for shortcuts; embrace the learning curve and its challenges - that's the path to mastery.

If you grab something pre-made WITHOUT a solid understanding, you'll find yourself lost in the labyrinth of its design. You're going to be even more stressed because you got no fucking clue where things are at. Seeking help for errors? Yeah, good luck! Your pre-made framework is much like a hotdog: filled with everyone's meat.😉

Backups

Always use GitHub to safeguard your data, ensuring it's backed up consistently. Make sure you push daily you lazy fucks!

For your SQL, I suggest utilizing SQLBackupAndFTP, which is entirely free. Create a folder within your GitHub repository, and set it up so that each daily backup is saved there. Then, simply push the backup to GitHub. Voilà! You've got a robust backup solution in place! https://sqlbackupandftp.com/

Conclusion

Folks, I constantly stress the importance of securing your data and files here, yet many choose to brush off my advice. Why? I can't fathom. You might think I'm just blowing hot air, but I promise, there'll come a day you'll wish you had heeded my words.

Always, ALWAYS back up your data! The loss of your data is an absolute catastrophe.

Case in point: on August 8th, a smaller shitty hosting company wiped out their customer's entire servers and data due to an internal error. Over 70 servers were terminated and are now irretrievable and all of their data are lost, huge incompetence on their part.

If you were hit by this massive blunder, give 1of1 Servers a shout. We'd be thrilled to have you on board and provide a substantial discount to make up for their massive fuckup.

Much love!

Guille G aka MonkeyWhisper