Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!


BMail.ag - Secure Email Service
Server.net
CPLicense.net
VPS Server
Buy VPN
Vultr
VMs for AI
HostDare
ReliableSite White-Label Dedicated Hosting for Resellers
25% Recurring Discount on NVMe VPS
Try EnsoVPN - Reliable VPN - 1-Day Free Trial
InterServer VPS
BMail.ag - Secure Email Service
Best VPN
High-Performance Bare Metal Server Solutions
Karvl.com
Server Mania Cloud Hosting
DataWagon Hosting
AlphaVPS Hosting
Evoxt.com
Clouvider
VPS Hosting with NVMe
Residential IPs in the US & 4G Mobile Proxies in EU & US with Unlimited Bandwidth
ReliableSite White-Label Dedicated Hosting for Resellers
Rabisu - Hosting Solutions
CloudLinux
Try EnsoVPN - Fast & Private VPN - 1-Day Free Trial
New on LowEndTalk? Please Register and read our Community Rules.

All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.

HostDzire Hit by Ransomware Attack

12346

Comments

  • @HostDZire is it effected SG?

  • tzulitzuli Member

    @nguyenduytan said: is it effected SG?

    Leaseweb servers are unaffected

  • jsgjsg Member, Resident Benchmarker

    @CheepCluck said:

    @forest said: Well of course! He's the main character in this entire incident, and the world clearly revolves around him. /s

    They lost nonillions!!

    Not me, I only lost half a billion, give or take B)

    That said, users/customers not having backups despite many warnings here on LET certainly is not @HostDZire's fault.

  • JasonMJasonM Member

    @HostDZire said: Customers with external backups will be able to restore their services once their replacement servers become available.

    thats the reason one should have an extra external backup to another provider.

  • raviravi Member

    @HyperDC please stop spamming my inbox to offer your data recovery service.

  • JasonMJasonM Member

    HyperDC just joined today!
    bro, you need a provider tag.

  • HyperDCHyperDC Member

    @ravi — apologies, that's on me and I've stopped. My own infrastructure was hit by the same thing this week and I reached out to people in the thread thinking it would help. Intention aside, that's not how it landed, and you're right to call it out. You won't hear from me again.

    @JasonM — fair, and thanks for saying it plainly. The account is new because I only registered when this happened to us. I'll get a provider tag through the proper channel rather than posting around without one.

    I'll leave the thread to the people actually affected. Anyone who wants to compare notes knows where to find me — I won't be messaging first.

  • @ravi said:
    @HyperDC please stop spamming my inbox to offer your data recovery service.

    fr no cap? @angstrom

  • VoidVoid Member

    @HyperDC said:
    @ravi — apologies, that's on me and I've stopped. My own infrastructure was hit by the same thing this week and I reached out to people in the thread thinking it would help. Intention aside, that's not how it landed, and you're right to call it out. You won't hear from me again.

    @JasonM — fair, and thanks for saying it plainly. The account is new because I only registered when this happened to us. I'll get a provider tag through the proper channel rather than posting around without one.

    I'll leave the thread to the people actually affected. Anyone who wants to compare notes knows where to find me — I won't be messaging first.

    You are absolutely correct — I recommend you ask for a red dp for more visibility and AI Post rewards @angstrom can help.

  • HyperDCHyperDC Member

    Ha, fair enough @Void. Six days of ransomware recovery and I start writing like a press release. Thanks for the red dp tip, I'll ping @angstrom.

  • AstroAstro Member

    @HyperDC said:

    Ha, fair enough @Void. Six days of ransomware recovery and I start writing like a press release. Thanks for the red dp tip, I'll ping @angstrom.

    are you literally just copy pasting in chatgpt and posting the responses here?

  • HyperDCHyperDC Member

    @Astro One message, sent once, to one person, in good faith. That isn't spam. Spam is the same template sent out to a list.

    People lost their infrastructure this week. Some of them still don't know whether their data is recoverable. Turning that into a joke isn't professional.

    I don't know any of you, and taking shots at me gains you nothing. I'm not asking anyone here for anything and I have no stake in this thread, so what exactly is the point?

  • tonicvpstonicvps Member, Host Rep

    @LEmeINalr said:
    Is there any other cheap provider out there for leaseweb vps's other than HostDzire officially? I only know of HostDzire and HBD.
    HBD also sell one around €5/m for the cheapest NL vps and its from the AMS-01 data racks.
    Or should I wait for BF at this point?
    I just care about the vps being vfm and backups/raid dont matter. I will only use it for a hobby project so need the LW network and colo and it sucks that they are B2B now.

    We're an authorized Leaseweb reseller and offer official Leaseweb VPS packages. If you're looking for Leaseweb infrastructure without a direct B2B account, that's exactly what we provide.

    Thanked by 1tux
  • NushairAlviNushairAlvi Member, Host Rep

    Give them some time to fix everything!

  • DjIcEDjIcE Member

    @HostDZire will you be able to provide with servers today? mine is NL, if you are already done with installation please give us our slots back, thank you

  • HostDZireHostDZire Member, Patron Provider

    @tzuli said:

    @nguyenduytan said: is it effected SG?

    Leaseweb servers are unaffected

    All Leaseweb VPS totally fine and is not effected.
    Nothing else is effected like dedicated server or other services.

    Only our own infra VPS in India and NL is effected, where we were using Vmware,
    India had lots of vps, NL had less.

  • HostDZireHostDZire Member, Patron Provider
    edited 6:33AM

    @DjIcE said:
    @HostDZire will you be able to provide with servers today? mine is NL, if you are already done with installation please give us our slots back, thank you

    Yes hopefully today we will start sending new vps. But later today, in night time probably.

    Thanked by 1mehargags
  • alexanderrasalexanderras Member
    edited 6:39AM

    @gritty said:

    will HostDzire take advantage of this physical changes of the datacenter to add IPv6 for Indian VPS?

    @HostDZire it would actually be nice if we could get IPv6 with the rebuild given you have to “touch” every vps anyway. At least something positive will then come from this

    Thanked by 1default
  • forestforest Member

    @alexanderras said:

    @gritty said:

    will HostDzire take advantage of this physical changes of the datacenter to add IPv6 for Indian VPS?

    @HostDZire it would actually be nice if we could get IPv6 with the rebuild given you have to “touch” every vps anyway. At least something positive will then come from this

    If getting ransomwared causes IPv4-only hosts to start setting up IPv6 while they rebuild, @yoursunny is going to start a ransomware business, mark my words.

  • alexanderrasalexanderras Member
    edited 6:46AM

    @forest said:

    If getting ransomwared causes IPv4-only hosts to start setting up IPv6 while they rebuild, @yoursunny is going to start a ransomware business, mark my words.

    He might!

    HostDZire have already done all the work to set up ipv6 apart from allocating ip addresses to servers, and were planning to anyway do this over the coming weeks - so it might just be able to work out in this case

  • @HostDZire said:

    @tzuli said:

    @nguyenduytan said: is it effected SG?

    Leaseweb servers are unaffected

    All Leaseweb VPS totally fine and is not effected.
    Nothing else is effected like dedicated server or other services.

    Only our own infra VPS in India and NL is effected, where we were using Vmware,
    India had lots of vps, NL had less.

    Are you sticking with VMware, or thinking about using something else like KVM?

  • defaultdefault Veteran
    edited 7:42AM

    Don't give such ideas to @yoursunny because all of us might end up doing pushups, by counting from /128 to /48

  • HostDZireHostDZire Member, Patron Provider

    @khalequzzaman said:

    @HostDZire said:

    @tzuli said:

    @nguyenduytan said: is it effected SG?

    Leaseweb servers are unaffected

    All Leaseweb VPS totally fine and is not effected.
    Nothing else is effected like dedicated server or other services.

    Only our own infra VPS in India and NL is effected, where we were using Vmware,
    India had lots of vps, NL had less.

    Are you sticking with VMware, or thinking about using something else like KVM?

    Before Vmware, KVM was also impacted, infact linux was impacted, so its not about vmware or kvm, nothing is safe right now due to AI.

  • forestforest Member
    edited 7:51AM

    @HostDZire said:

    @khalequzzaman said:

    @HostDZire said:

    @tzuli said:

    @nguyenduytan said: is it effected SG?

    Leaseweb servers are unaffected

    All Leaseweb VPS totally fine and is not effected.
    Nothing else is effected like dedicated server or other services.

    Only our own infra VPS in India and NL is effected, where we were using Vmware,
    India had lots of vps, NL had less.

    Are you sticking with VMware, or thinking about using something else like KVM?

    Before Vmware, KVM was also impacted, infact linux was impacted, so its not about vmware or kvm, nothing is safe right now due to AI.

    I beg to differ. VMWare is rather infamous for its poor security. AI will make that worse.

    KVM, with its very small attack surface, is going to hold up much better to the AI onslaught.

  • mehargagsmehargags Member

    @HostDZire said:
    Yes hopefully today we will start sending new vps. But later today, in night time probably.

    I hope you will send a email notification to all customers when their fresh VMs are provisioned ?

  • AlteredParadoxAlteredParadox Member, Megathread Squad

    @mehargags said:

    @HostDZire said:
    Yes hopefully today we will start sending new vps. But later today, in night time probably.

    I hope you will send a email notification to all customers when their fresh VMs are provisioned ?

    Nope

    Thanked by 1buggedout
  • @nettest said:

    @HostDZire said:
    Update – Infrastructure Rebuild Progress
    Dear Everyone,

    We would like to provide you with an update on the recovery efforts following the recent VMware infrastructure incident.

    Today, our team completed a significant amount of work toward rebuilding the affected environment. In addition to reinstalling the operating systems on all affected virtualization nodes, we have also finalized the design of a new infrastructure and security architecture aimed at significantly reducing the risk of similar incidents in the future.

    Implementing these improvements requires several physical changes within the datacenter, which has made the recovery process more time-consuming than a standard rebuild. Our priority is not only to restore services as quickly as possible, but also to ensure the rebuilt infrastructure is considerably more secure and resilient.

    Tomorrow, we will continue with the remaining datacenter work and infrastructure configuration. If everything proceeds as planned, we expect to begin provisioning new VPS instances from tomorrow. Replacement VPS services will be assigned to affected customers one by one as each virtualization node becomes ready.

    We understand how disruptive this incident has been, and we truly appreciate your patience and understanding while we work to restore services safely and securely.

    Further updates will be posted as recovery progresses.

    Kind Regards,
    HostDZire Team

    Could you please let me know whether a prorated refund is available?

    Right in the nuts, man! Great timing. 😎

  • raviravi Member

    @forest said:

    I beg to differ. VMWare is rather infamous for its poor security. AI will make that worse.

    KVM, with its very small attack surface, is going to hold up much better to the AI onslaught.

    I agree.

  • @DanSummer said:

    @nettest said:

    @HostDZire said:
    Update – Infrastructure Rebuild Progress
    Dear Everyone,

    We would like to provide you with an update on the recovery efforts following the recent VMware infrastructure incident.

    Today, our team completed a significant amount of work toward rebuilding the affected environment. In addition to reinstalling the operating systems on all affected virtualization nodes, we have also finalized the design of a new infrastructure and security architecture aimed at significantly reducing the risk of similar incidents in the future.

    Implementing these improvements requires several physical changes within the datacenter, which has made the recovery process more time-consuming than a standard rebuild. Our priority is not only to restore services as quickly as possible, but also to ensure the rebuilt infrastructure is considerably more secure and resilient.

    Tomorrow, we will continue with the remaining datacenter work and infrastructure configuration. If everything proceeds as planned, we expect to begin provisioning new VPS instances from tomorrow. Replacement VPS services will be assigned to affected customers one by one as each virtualization node becomes ready.

    We understand how disruptive this incident has been, and we truly appreciate your patience and understanding while we work to restore services safely and securely.

    Further updates will be posted as recovery progresses.

    Kind Regards,
    HostDZire Team

    Could you please let me know whether a prorated refund is available?

    Right in the nuts, man! Great timing. 😎

    up up up

  • drivexdrivex Member

    Pretty sure the VMware hosts were publicly reachable, with no security concept like firewall/vpn and/or network segmentation.

Sign In or Register to comment.