I am wondering how can someone get access of server from a android device, i know there are many rats etc for android but a targetted attack isnt possible unless they knew that you access your servers from that device and somehow they made you to install a unknown unverified app.
I never accessed those VPS from a windows box, only unix based computers. all the accounts(email,vps provider,etc) had two factor auth on them. A password reset was preformed on one of the VPS and the password was in clear text via email to my phone. Within an hour of the reset the server was access from an IP out of the USA, and it appears that was a proxy server. My phone started crashing give me error messages that an unauthorized program has stopped the day before the password reset. The AV never detected anything on it, and I wiped it. I don't think its was compromised from the hosting company.
FYI: 30% of the coins lost are my own