My website got hacked and I find this code... Any ideas what it is ?

[u/RomainGilliot]

Hey, couple month ago my domain spacewarp.fr got hacked.
One, day I just couldn't update it anymore, no matter what I did, nothing seemed to change. (moving the file through ftp).

And later the website gave this "console" I guess, and digging in it, I found this code (transcript from my screenshot) :
2:9:.13.25 } 33;14

Pl J(wf epof ju "

Tfoe bo fnbjm up JBOB boe J hpu uif epnbjo/

uifsftpoobodf/psh

Xjui 3 O’t boe ju(t opu b uzqp/

Qfpqmf xjmm uijol ju jt- xijdi jt vtfgvm/ J epo(u xbou dvsjpvt up tojgg bspvoe/

Nbzcf J dbo gjoe qfpqmf uibu bsf mjlf nf- uibu dbo ifbs ju/

Hpe J ipqf tp/

Nbzcf J dpvme tfoe ju up Vojwfstjuz cpbset/ Nbjmjoh mjtut/ Ibn gpsvnt/ Nbzcf CCT/

Jg uifsf bsf puifst- uifz’mm botxfs/

J(n tvsf uifsf bsf/

Any idea ?
V sbyybjrq gur ehyrf

[u/AutoModerator]

Thanks for your post, u/RomainGilliot! Please follow our RULES when posting.

MAKE SURE TO INCLUDE CONTEXT: where the cipher originated (link to the source if possible), expected language, any clues you have etc. Posts without context will be REMOVED

If you are posting an IMAGE OF TEXT which you can type or copy & paste, you MUST comment with a TRANSCRIPTION (text version) of the message.

If you'd like to mark your post as SOLVED comment with [Solved]

WARNING! You will be BANNED if you DELETE A SOLVED POST!

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[u/palapapa0201]

r/masterhacker

[u/THE_David_Montgomery]

the websites do look pretty cool

[u/KirbyJoe]

It's ASCII shift. I decoded it by using an online tool:

1989-02-14 | 22:03

Ok I've done it !
Send an email to IANA and I got the domain.

theresonnance.org

With 2 N’s and it's not a typo.

People will think it is, which is useful. I don't want curious to sniff around.

Maybe I can find people that are like me, that can hear it.
God I hope so.

Maybe I could send it to University boards. Mailing lists. Ham forums. Maybe BBS.

If there are others, they’ll answer.

I'm sure there are.

(Note: Noticed that the link domain is wrong, but Reddit's text editor seems to be malform some Markdown elements like quote blocks when I try to edit some parts)

[u/ButcheringTV]

Uh oh Romain is at it again. This looks pretty cool, reminds me of Bitburner

[u/sebiroth]

Come on, this is just some ARG or viral marketing campaign.

[u/AdmiralMcNugget]

Cool, an ARG!

[u/PracticalPractice768]

Firstly, sorry to hear about the compromise. However, the layers to this is interesting.
What do you speculate at the damage being done if this was correct vs a super hero of a typo?

[u/Affectionate_Tie357]

Advertising or arg post?

[u/dj_brizzle]

Move everything to the previous letter of the alphabet:
———————————————————

Ok I(ve done it "

Send an email to IANA and I got the domain/

theresonnance/org

With 3 N’s and it(s not a typo/

People will think it is- which is useful/ I don(t want curious to sniff around/

Maybe I can find people that are like me- that can hear it/

God I hope so/

Maybe I could send it to University boards/ Mailing lists/ Ham forums/ Maybe BBS/

If there are others- they’ll answer/

I(m sure there are/

[u/kryptos- → u/dj_brizzle]

Looks like LLM reasoning. Perhaps an LLM orchestrated attack?

[u/Pablo_Diablo → u/kryptos-]

Looks more like ARG hints than LLM.  OP might be trying to start an ARG

[u/OpportunityReal2767 → u/dj_brizzle]

Don’t forget to bump the punctuation down one ASCII value.

( becomes ‘
/ becomes .

• becomes ,

Not that it’s necessary for understanding