If you’re confident that your system is compromised and it persists beyond re-installations, you can try to reduce the attack surface by switching up your setup a bit.
-
Try installing something like OpenBSD or FreeBSD if your hardware is supported. Software made for Linux often doesn’t even work on BSD flavors unless it’s recompiled specifically for those Operating Systems. Another alternative would be Alpine Linux. Software that relies on
glibc
often doesn’t work on Alpine thanks tomusl
. -
If your network has been compromised, consider looking into your router’s settings. If you can, try to setup OPNSense so you have better control and visibility over network traffic. You can setup some pretty extensive firewall rules, and if you’re savvy with
pf
you can really go all out. Alternatively, you can setup an app like Wireshark to take a look at what ingress and egress traffic looks like for your device.
None of this has to be permanent unless you’re comfortable with a different setup. Hackers will eventually get bored and move on. You just need to outlast them with a setup they can’t do much with.
Friendly reminder that seedboxes are definitely worth it. Go for a seedbox if you can afford it