A replacement temp loan server was running an OS (maybe Ubuntu?) that had an outdated openssh with a vulnerability that allowed attackers using Israeli IPs to exfiltrate his credentials and delete most data, while defacing the site publicly. Based on the remaining logs it appeared to be AI assisted...
