Other Backdoor situation? How and what are we doing?

So recently I've heard a lot of chatter circulating about CW backdoor, with allegedly some unsavory types going around to delete server files and fuck everything up.

So in regards to this, has there been any actual updates on how to prevent it? I'm planning on opening my server soon but I wonder if it's safe to do so.

 

Well I am currently in the process of rebuilding my server. I opened my server for public beta today (and didn't take a backup), but it should only take me around three hours to put everything back up. I recommend taking DAILY backups of both your database and servers, and doing this.

Good luck, and remember... take backups!!!

Best Regards,
Blizzard

EDIT: A staff member of mine caught the culprit! He was the only one on besides two-three others that was not staff. We have verified that the others did not cause anything. Anyways, blacklist this steam ID:
STEAM_0:1:37617012

 

Thanks for that, I've made sure to add it to the list. I hope to receive some more updates on how to prevent this until an actual fix has been implemented.

@cash wednesday

I'd like to ask permission to make this a thread to identifying the ones behind this so we can take action. I'm aware this goes against the rule of slander, but it is our only remote way of dealing with this.

 

No problem!

 

An actual fix is already being implemented as more information comes. If you have a server I'd highly recommend deleting the following plugins unless you've downloaded them from a source other than the plugin center: HL2TS2Clothing, Alkos Menu V2, Alcohol, Background Music. These were the problem plugins and were up for days without me noticing, so I am deeply sorry for that and for any server owners who experienced issues while using the plugin center service. These plugins should have automatically uninstalled themselves from your server, but just in case they didn't you should check anyways. I will be talking to kurozael about CAX bans and CAX fixes with the issue, as I have been brought evidence that residual commands may still be in your server, but it is unknown where they are exactly, so blanket nullifying them is the next best option. We also have several names who have shown themselves to be repeat offenders, and they will be dealt with swiftly.

Thanks. - cash

 

Thank you so much, I'll check immediately.

 

This seems to have happened to my server as well... Weird and scary but I hope staff can fix it.

 

Like I said, check your plugins.