#1 I never ignored him, he spammed me with messages and calls at 6 am.
https://gyazo.com/48944dcfddad05159d2b874ef601d6ec
https://gyazo.com/9852d7bd7d0e3a1c5d34c8aafa1b2f4a
#2 I don't have access to his VPS. I gave him clear instructions on how to change the VPS password. He is the admin on it. Proof below.
#3 I never downloaded a ransomware on any VPS. The English on that program is atrocious. His VPS is the only one affected. It may have been through him or his workers.
Proof that he was going to have other people on the VPS:
#4 There are many ways for computers and VPS to get infected by ransomware. It may be his workers or him clicking on a phishing email or even brute force:
sources: https://healthitsecurity.com/news/samsam-ransomware-attackers-target-healthcare-providers
https://www.securityweek.com/hackers-using-rdp-attacks-install-crysis-ransomware
Although new to my knowledge, these ransomwares seem pretty common these days but knowing this information I will take extra precautions in the future.
We can try reinstalling the Operating System or doing a System restore to an earlier point in time.
I understand TWCing me but can I please have my sponsor rank back?