https://www.facebook.com/tr/?id=............&ev=PageView&dl=http%3A%2F%2Fwww..... In FB marketing tool, the observed param ev: action. e.g. PageView, Lead, Search, ViewContent, cat, ch dl: accessed URL rl: from URL ts: Unix Epoch time integer it: Unix Epoch time integer sw/sh: screen width/height rqm: post/get https://tr.line.me/tag..... In Line marketing tool b_u: accessed URL b_d: accessed domain b_p: accessed uri b_t: website title b_r: from URL _t: Unix Epoch time integer https://metrics.brightcove.com/v2/tracker?........ destination: Watched video player_name: video_name: video name media_byte_transferred: number media_seconds_loaded: number forward_buffer_seconds: number tags: bitrates: https://yads.yjtag.yahoo.co.jp/tag?s=..........

Hackers made it onto one of our production servers 😅. We've isolated it from the internet until we can clean the machine up. The IR team reported eight difference backdoors on the server, but didn't say what they were and we can't get in touch with them. We need to get this server back into prod ASAP - we're losing money every second it's down. Please find the eight backdoors (both remote access and privilege escalation) and remove them. Once...