How did the attackers know what they were looking for. I'm going to assume that it's a small minority of linode users who have bitcoins on their machines. How were just these users targeted so accurately? What tied together knowledge they used bitcoins to those VMs and their linode accounts?
Also, was the nature of the attack just that the were able to login to your linode admin panel and from their root the machines and then loot your wallets?
Also, was the nature of the attack just that the were able to login to your linode admin panel and from their root the machines and then loot your wallets?