Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!

Sign In Register

Quick Links


BMail.ag - Secure Email Service
Server.net
CPLicense.net
VPS Server
Buy VPN
Vultr
VMs for AI
HostDare
ReliableSite White-Label Dedicated Hosting for Resellers
25% Recurring Discount on NVMe VPS
Try EnsoVPN - Reliable VPN - 1-Day Free Trial
InterServer VPS
BMail.ag - Secure Email Service
Best VPN
High-Performance Bare Metal Server Solutions
Karvl.com
Server Mania Cloud Hosting
DataWagon Hosting
AlphaVPS Hosting
Evoxt.com
Clouvider
VPS Hosting with NVMe
Residential IPs in the US & 4G Mobile Proxies in EU & US with Unlimited Bandwidth
ReliableSite White-Label Dedicated Hosting for Resellers
Rabisu - Hosting Solutions
CloudLinux
Try EnsoVPN - Fast & Private VPN - 1-Day Free Trial

Categories

In this Discussion

Home › Providers › Outages
New on LowEndTalk? Please Register and read our Community Rules.

All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.

HostDzire Hit by Ransomware Attack

124

Comments

  • DjIcEDjIcE Member

    @HostDZire whatever happened, happened, its in the past, can you atleast give us a time fremae that when the servers will be online again, or tabout the raplacemnet we might recive> any time frame? how long, its a money problem now, as we earn from our servers, without them 0$, so when will we recive a replacement? becase whenever when we miss a invoice without a warning you always disable the server, now we need answers.

  • rpqurpqu Member

    @DjIcE said:
    its money problem now, as we earn from our servers, without them 0$, so when will we recive a replacement?

    Spin an hourly server

    Thanked by 1fredo1664
  • SadaoMaouSadaoMaou Member

    @tranit said:
    Feeling bad now :( I don't think I can continue to trust after this..

    I agree tbh

  • AlteredParadoxAlteredParadox Member, Megathread Squad

    Lololol. The amount of people who don’t bother to read the tos, sign up for a cheap thing that explicitly has no backups, then pull the “I can’t trust you anymore I’m losing MILLIONS” card, but yet learn nothing from the experience and move to another cheap provider only to rinse and repeat… is just a never ending source of entertainment when it comes to LET

    Thanked by 9xvps Platonks JohnFilch123 NotFoundException Killix bbmmsvr4u FAT32 jsg buggedout
  • SadaoMaouSadaoMaou Member

    @AlteredParadox said:
    Lololol. The amount of people who don’t bother to read the tos, sign up for a cheap thing that explicitly has no backups, then pull the “I can’t trust you anymore I’m losing MILLIONS” card, but yet learn nothing from the experience and move to another cheap provider only to rinse and repeat… is just a never ending source of entertainment when it comes to LET

    Lmao nobody is losing millions here dude but the provider did not even bothered to communicate unless we look in their panel or this Thread.

  • zedzed Member

    i don't think it's unreasonable for people to ask about an eta, but it's also perfectly reasonable for @HostDZire to not be able to give one yet, shit just happened give them a minute.

    Thanked by 2OpaqueRegistrant NotFoundException
  • sliixsliix Member

    I have already lost millions /s.

    Thanked by 3rpqu bbmmsvr4u buggedout
  • diwakerddiwakerd Member

    I narrowly escaped this disaster Just four days ago I migrated one of my client's apps to an OVH dedicated server because the vps server was running out of disk space

  • rad964rad964 Member
    edited 2:55PM

    @AlteredParadox said:
    Lololol. The amount of people who don’t bother to read the tos, sign up for a cheap thing that explicitly has no backups, then pull the “I can’t trust you anymore I’m losing MILLIONS” card, but yet learn nothing from the experience and move to another cheap provider only to rinse and repeat… is just a never ending source of entertainment when it comes to LET

    I'm just sad that I decided to not setup database backup. I have project files in S3, and I have project code and reproducible deployment. I just don't have database that have links to files anymore.
    A month worth of data is gone for a pet project.
    Life lesson I guess.

  • rpqurpqu Member

    @rad964 said:

    @AlteredParadox said:
    Lololol. The amount of people who don’t bother to read the tos, sign up for a cheap thing that explicitly has no backups, then pull the “I can’t trust you anymore I’m losing MILLIONS” card, but yet learn nothing from the experience and move to another cheap provider only to rinse and repeat… is just a never ending source of entertainment when it comes to LET

    I'm just sad that I decided to not setup database backup. I have project files in S3, and I have project code and reproducible deployment. I just don't have database that have links to files anymore.
    A month worth of data is gone for a pet project.
    Life lesson I guess.

    AI could help

  • alincupunctalincupunct Member

    @AlteredParadox said:
    Lololol. The amount of people who don’t bother to read the tos, sign up for a cheap thing that explicitly has no backups, then pull the “I can’t trust you anymore I’m losing MILLIONS” card, but yet learn nothing from the experience and move to another cheap provider only to rinse and repeat… is just a never ending source of entertainment when it comes to LET

    You might legit have empty space where your brain should be if you host anything with a provider that gets ransomware'd.

    Thanked by 1OpaqueRegistrant
  • vpsTQvpsTQ Member

    Can I get a refund? I no longer have any trust.

  • OpaqueRegistrantOpaqueRegistrant Member

    @HostDZire said:

    @Arirang said:
    Might as well configure the disks in RAID in AMS if it has been affected while you’re rebuilding the hypervisor.

    RAID has nothing to do with this incident. Around 80% of our affected nodes, including all VMware nodes in India, were already running on RAID. RAID protects against physical disk failures, it does not protect against ransomware or data encryption.

    The only effective protection in a situation like this would have been independent backups. If we had full VM backups, even on a weekly schedule, we could have restored those backups and significantly reduced the impact of this incident.

    I think they are saying that since you can't add RAID to an existing storage system with data already on it, now that you have deleted all of your customer data it is a good opportunity to start using RAID. :)

    Thanked by 1Arirang
  • OpaqueRegistrantOpaqueRegistrant Member

    @samsaie said:

    >

    Was the data merely encrypted, or has it already been taken by hackers? I need to assess whether my backup data is also no longer secure.

    Most modern ransomware both encrypts and steals data. We should assume that everything stored on an affected VPS has been stolen, and Wil be released onto the dark web when HostDZire doesn't pay the ransom. Everyone should remember to change their SSH and Wireguard keys. If your server had anything to do with cryptocurrency then red alert on that - move it to a new wallet immediately. And so on.

    Thanked by 1qcfgpp
  • defaultdefault Veteran

    @SadaoMaou said:

    @tranit said:
    Feeling bad now :( I don't think I can continue to trust after this..

    I agree tbh

    I hope you guys do realise you're speaking of trust in an age of artificial intelligence. Nothing can be trusted in our age. What large groups of people were testing in years, now is tested in days with speed.

    Backup your data, so if you lose it to AI you can at least blame yourselves! Don't blame the providers for not being always up to date with daily security news. You're not paying here for that kind of corporate service and security; you are on the low-end side of things.

    Thanked by 3xvps rpqu buggedout
  • DjIcEDjIcE Member

    Come one we just need a time frame, wehen will be replacement ready,its almost 24 hours, just give us the replacement,

  • ServynServyn Member

    I don't think data loss is a big deal, but a data leak would be a fatal problem.

    Thanked by 1rpqu
  • ServynServyn Member

    Hopefully, it's just an encrypted hard drive issue, and not a data breach.

  • JohnFilch123JohnFilch123 Member

    @Servyn said:
    I don't think data loss is a big deal, but a data leak would be a fatal problem.

    What did you store on that server?

  • defaultdefault Veteran

    @JohnFilch123 said:

    @Servyn said:
    I don't think data loss is a big deal, but a data leak would be a fatal problem.

    What did you store on that server?

    Linux ISOs. If someone compromises those, it will be really bad for any other user who downloaded those files.

  • host_chost_c Patron Provider, Top Host, Megathread Squad

    @amarc said:
    Interesting business decision: VMware but no backups. Doesn't VMware have full set of products designed around main product for centralized storage, DR, backups.. and only proper way of using VMware is to use full set of products ?

    If you want my advice (which you should not): ZFS that shit. Even Proxmox is possible solution. ZFS with 7-days offsite snapshots would at least save VM data. Do it "pull", not "push" way also. That way when someone get's in your server they do not even know about backup server existence.

    vMware has...........mostly veeam, last time we got a quote from them was ~2 years back with a 1000 USD for each server ( 2 sockets ), so at cheap services I doubt anyone would offer a free backup, hence why a large part of the industry is on Proxmox or other similar.

    Regarding ZFS and snapshots, I will say pass, snapshots are not backup, they never were nor one should use them for that, it might look good on paper, but it is really not.

    @xHosts said:

    @amarc said:
    Interesting business decision: VMware but no backups. Doesn't VMware have full set of products designed around main product for centralized storage, DR, backups.. and only proper way of using VMware is to use full set of products ?

    If you want my advice (which you should not): ZFS that shit. Even Proxmox is possible solution. ZFS with 7-days offsite snapshots would at least save VM data. Do it "pull", not "push" way also. That way when someone get's in your server they do not even know about backup server existence.

    Most of it comes down to cost, not application features.

    A customer cannot buy a low value plan but expect all premium features to be included.

    If you require certain guarantees, you need to pay for that at the end of the day.

    Precisely, well said :+1: +1

    @HostDZire

    I am sorry to hear that this happened to a fella Operator. I can imagine how difficult the situation must be. If there’s anything we can do to help, please don’t hesitate to ping me.

    Thanked by 3bbmmsvr4u jsg buggedout
  • fredo1664fredo1664 Member

    @host_c said:

    vMware has...........mostly veeam, last time we got a quote from them was ~2 years back with a 1000 USD for each server ( 2 sockets ), so at cheap services I doubt anyone would offer a free backup, hence why a large part of the industry is on Proxmox or other similar.

    Out of curiosity I checked how expensive vmware can be and it looks very expensive indeed. Is it even profitable for a LET-friendly budget host to use vmware to sell VPS unless it's the free edition?

  • defaultdefault Veteran

    @fredo1664 said:

    @host_c said:

    vMware has...........mostly veeam, last time we got a quote from them was ~2 years back with a 1000 USD for each server ( 2 sockets ), so at cheap services I doubt anyone would offer a free backup, hence why a large part of the industry is on Proxmox or other similar.

    Out of curiosity I checked how expensive vmware can be and it looks very expensive indeed. Is it even profitable for a LET-friendly budget host to use vmware to sell VPS unless it's the free edition?

    If @HostDZire rebuilds it all, they might as well rethink it and switch to KVM or something else. Once upon a time LET was using even OpenVZ.

    Thanked by 1bbmmsvr4u
  • drivexdrivex Member

    I‘m asking myself, if the VMware ESXi panels have been reachable over the internet? I really hope not…

  • JohnFilch123JohnFilch123 Member

    @default said:

    @JohnFilch123 said:

    @Servyn said:
    I don't think data loss is a big deal, but a data leak would be a fatal problem.

    What did you store on that server?

    Linux ISOs. If someone compromises those, it will be really bad for any other user who downloaded those files.

    Ya not good. Well, if you download ISOs, you are responsible for checking them.

  • manishmanish Member

    @itachikonoha said: Mine is down.

    Sucks.

    @FairShare said: more than an year of blogging down in the drain ...fuk .. :(

    Ah! very sad. Did you do tech blogging?

  • AndreixAndreix Member, Host Rep

    Why do I have a feeling someone just ran a "getlic.sh" for cpanel license and got himself a host privilege escalation thingy?!

    Just a feeling... we, old men, have weird feelings depending on the weather sometimes.

  • nettestnettest Member
    edited 5:46PM

    I would like to request a refund.

  • AlteredParadoxAlteredParadox Member, Megathread Squad

    🤣

  • xHostsxHosts Member, Patron Provider

    @nettest said:
    I would like to request a refund.

    You expect the provider to simply know who you are out of their many customers?

    Thanked by 3jsg buggedout host_c
Sign In or Register to comment.