ColoCrossing Database Breach

raindog308

@wadhah said: Yeah ColoCrossing owns LowEndTalk and LowEndBox,

Not true. CC used to own LET/LEB, but @jbiloh bought it years ago and owns it personally. CC has nothing to do with the administration of LET/LEB, and neither site runs on CC infrastructure./

@wadhah said: @jbiloh is an employee of CC

Also untrue. CC is owned by HostPapa and Jon does consulting for the latter.

@wadhah said: and the admin of LET

This much is true.

raindog308

Weird...I didn't get an email. I have a dedi on the portal side (which seems to be operating normally), and while I don't have a VM currently on the cloud side, I have in the past and am certainly registered there.

adanforest

@mateolee said:
Notice they have not contacted us in any way. If they were worried about the users' data, they would have at least written us a hello. But they didn't.

mateolee

@iceman said:

@mateolee said:

@iceman said:

@mateolee said:
Hi everyone, we want to clarify the situation with ColoCrossing, the most important reason for all this is that the administration ignores illegal content on their servers such as:
Child pornography, carding, phishing, Botnets, Swatting software, Rat software, DeepFakes. And the like.

Now think about it. They didn't choose to reach out after being informed of the situation. They chose to make the situation worse

So, you choose to hack them because they had child porn and other shits, but if they have had paid you 10k you were ok then? What a fucking motherf*cker!

Don't blame us, colocrossing is no better than we are.

Just get the fuck out of here you moron, there are authorities who would take care of this if you care too much about all of what they provide! But no, you choose to hack them because of money. Just go kill yourself!

Colocrossing has been running for 22 years(according to google), and the servers where this illegal content was hosted for about a year without interruption, do you think someone is solving these problems? Given that the servers with illegal content have been hosted for years without interruption - no, no one is interested in it

tentor

@mateolee said:

@iceman said:

@mateolee said:

@iceman said:

@mateolee said:
Hi everyone, we want to clarify the situation with ColoCrossing, the most important reason for all this is that the administration ignores illegal content on their servers such as:
Child pornography, carding, phishing, Botnets, Swatting software, Rat software, DeepFakes. And the like.

Now think about it. They didn't choose to reach out after being informed of the situation. They chose to make the situation worse

So, you choose to hack them because they had child porn and other shits, but if they have had paid you 10k you were ok then? What a fucking motherf*cker!

Don't blame us, colocrossing is no better than we are.

Just get the fuck out of here you moron, there are authorities who would take care of this if you care too much about all of what they provide! But no, you choose to hack them because of money. Just go kill yourself!

Colocrossing работает уже 22 года (по данным google), а сервера, на которых этот нелегальный контент размещался около года без перерыва, как вы думаете, кто-то решает эти проблемы? Учитывая, что сервера с нелегальным контентом размещаются годами без перерыва - нет, это никого не интересует

whaaa

mateolee

@adanforest said:

@mateolee said:
Notice they have not contacted us in any way. If they were worried about the users' data, they would have at least written us a hello. But they didn't.

They sent out a message claiming they had "resolved" something, but they didn’t even try to contact us. They haven’t resolved anything — they just temporarily disabled the panels.

Maelstrom36

@mateolee said:
Notice they have not contacted us in any way. If they were worried about the users' data, they would have at least written us a hello. But they didn't.

Businesses engaging in negotiation with hackers can raise serious ethical and legal questions. Giving in to extortion can also complicate the situation.

mateolee

@Maelstrom36 said:

@mateolee said:
Notice they have not contacted us in any way. If they were worried about the users' data, they would have at least written us a hello. But they didn't.

Businesses engaging in negotiation with hackers can raise serious ethical and legal questions. Giving in to extortion can also complicate the situation.

They didn't even try, at least they could have at least asked our requests, maybe we would have agreed on something other than money

Void

@Neoon said:

@Grentenville said:
It appears that they are starting to delete VMs, as per their telegram channel?

What?!

Could be true, mine went down as per monitoring.

timmmy

some weasel level fuckery right here

default

zGato

what a fucking shitshow, I'm literally seeing my VMs go in front of my own eyes
Both DUB nodes:

For their only node in Chicago (as far as I'm aware)

Same with Texas

darkimmortal

There goes my Dublin VPS, rip

tentor

@default said:

To be fair it is still not known for sure if credentials were leaked (human error) or a Virtualizor bug

adanforest

my vps is gone too.

zGato

@tentor said:

@default said:

To be fair it is still not known for sure if credentials were leaked (human error) or a Virtualizor bug

Only thing we know is that they still have access, despite @ColoCrossing claims, which is just fucking insane.

Maelstrom36

@mateolee said:

@Maelstrom36 said:

@mateolee said:
Notice they have not contacted us in any way. If they were worried about the users' data, they would have at least written us a hello. But they didn't.

Businesses engaging in negotiation with hackers can raise serious ethical and legal questions. Giving in to extortion can also complicate the situation.

They didn't even try, at least they could have at least asked our requests, maybe we would have agreed on something other than money

Engaging with hackers can encourage further criminal activity and reinforces the cycle of threats and extortion.

mateolee

@zGato said:

@tentor said:

@default said:

To be fair it is still not known for sure if credentials were leaked (human error) or a Virtualizor bug

Only thing we know is that they still have access, despite @ColoCrossing claims, which is just fucking insane.

That's what we're talking about. They're dusting your eyes to pretend there's no leak and so on.

timmmy

@default said:

founder of LET is long gone from the forum

sh97

My Dublin VM is nuked I guess 🥲🥲

default

@zGato said:

@tentor said:

@default said:

To be fair it is still not known for sure if credentials were leaked (human error) or a Virtualizor bug

Only thing we know is that they still have access, despite @ColoCrossing claims, which is just fucking insane.

They could simply go inside the datacenter and pull out the cables from servers, then try to rescue from backups or something.

SashkaPro

@mateolee maybe you can setup ipv6 while you're in there

mateolee

@default said:

@zGato said:

@tentor said:

@default said:

To be fair it is still not known for sure if credentials were leaked (human error) or a Virtualizor bug

Only thing we know is that they still have access, despite @ColoCrossing claims, which is just fucking insane.

They could simply go inside the datacenter and pull out the cables from servers, then try to rescue from backups or something.

We want to disappoint you, ColoCrossing does not have any backups, they only did backups of admin servers and master database. They have never backed up the client servers.

itzgeo

https://x.com/thesheryarcom/status/1926568539315433973

Neoon

@zGato said:
what a fucking shitshow, I'm literally seeing my VMs go in front of my own eyes
Both DUB nodes:

For their only node in Chicago (as far as I'm aware)

Same with Texas

Any refugee deals, without Shitolizor?

techdragon

@zGato said:

@tentor said:

@default said:

To be fair it is still not known for sure if credentials were leaked (human error) or a Virtualizor bug

Only thing we know is that they still have access, despite @ColoCrossing claims, which is just fucking insane.

I guess they couldn't turn the power off.

barbaros

@mateolee said:

@Maelstrom36 said:

@mateolee said:
Notice they have not contacted us in any way. If they were worried about the users' data, they would have at least written us a hello. But they didn't.

Businesses engaging in negotiation with hackers can raise serious ethical and legal questions. Giving in to extortion can also complicate the situation.

They didn't even try, at least they could have at least asked our requests, maybe we would have agreed on something other than money

I am not sure what your requests are. But at this point, you already leaked their full customer DB that contains personal information. You accessed to every or almost every VM on their nodes, added files to people's VPS.

IF they give you X amount of money or whatever you ask for, do you think everyone will act like nothing happened?

All of CC's customer data and VPS nodes are exposed, there is zero trust to you (no offence) or to CC from their customers.

Only action that can be taken right now as their customers is to destroy VMs and change provider. There is no guarantee that the VMs are not infected or ransomwared. You can't just take out data from those VPS and use it at a different VPS.

So I doubt anyone will get in contact with you to give you money or whatever you are wanting at this point. That leverage is long gone when you announced that you got into their servers.

faithhost

@barbaros said:

@mateolee said:

@Maelstrom36 said:

@mateolee said:
Notice they have not contacted us in any way. If they were worried about the users' data, they would have at least written us a hello. But they didn't.

Businesses engaging in negotiation with hackers can raise serious ethical and legal questions. Giving in to extortion can also complicate the situation.

They didn't even try, at least they could have at least asked our requests, maybe we would have agreed on something other than money

I am not sure what your requests are. But at this point, you already leaked their full customer DB that contains personal information. You accessed to every or almost every VM on their nodes, added files to people's VPS.

IF they give you X amount of money or whatever you ask for, do you think everyone will act like nothing happened?

All of CC's customer data and VPS nodes are exposed, there is zero trust to you (no offence) or to CC from their customers.

Only action that can be taken right now as their customers is to destroy VMs and change provider. There is no guarantee that the VMs are not infected or ransomwared. You can't just take out data from those VPS and use it at a different VPS.

So I doubt anyone will get in contact with you to give you money or whatever you are wanting at this point. That leverage is long gone when you announced that you got into their servers.

We don't need anything anymore. If Colocrossing decided to give a damn about customer data, they didn't contact us in the first place. They had 24 hours, no one dared to check anything.

Void

@mateolee said:

@default said:

@zGato said:

@tentor said:

@default said:

To be fair it is still not known for sure if credentials were leaked (human error) or a Virtualizor bug

Only thing we know is that they still have access, despite @ColoCrossing claims, which is just fucking insane.

They could simply go inside the datacenter and pull out the cables from servers, then try to rescue from backups or something.

We want to disappoint you, ColoCrossing does not have any backups, they only did backups of admin servers and master database. They have never backed up the client servers.

So the messenger is an old and inactive account, probably hacked too. Boi ain’t that familiar 😐

Neoon

@Void said:
@mateolee said:

@default said:

@zGato said:

@tentor said:

@default said:

To be fair it is still not known for sure if credentials were leaked (human error) or a Virtualizor bug

Only thing we know is that they still have access, despite @ColoCrossing claims, which is just fucking insane.

They could simply go inside the datacenter and pull out the cables from servers, then try to rescue from backups or something.

We want to disappoint you, ColoCrossing does not have any backups, they only did backups of admin servers and master database. They have never backed up the client servers.

So the messenger is an old and inactive account, probably hacked too. Boi ain’t that familiar 😐

They sell Telegram accounts like Hotcakes and anything else, pretty sure they are selling LET accounts too.