HostDzire Hit by Ransomware Attack

Comments

• DecBlues Member

  1:58PM

  My SG VPS is Working Normally. Thank you.
• drShank Member

  1:59PM

  when can we expect INDIA VPS to be online?
• AlteredParadox Member, Megathread Squad

  2:08PM

  @drShank said:
  when can we expect INDIA VPS to be online?

  It’ll take a little longer for every “are we there yet” post he has to stop working to answer.

  Thanked by 1buggedout
• nishantk Member

  3:37PM

  Damn! i didn't get any email from @HostDZire you should have notified the clients about the incident via email, not everyone login to control panel everyday to check announcements or checks LET.

  Thanked by 2HonestOpinions mehargags
• DanSummer Member

  3:38PM edited 3:39PM

  @drivex said:
  Pretty sure the VMware hosts were publicly reachable, with no security concept like firewall/vpn and/or network segmentation.

  How come you're pretty sure?
• DjIcE Member

  3:44PM

  hopefully we will get out servers before tomorrow,
• stable_genius Member

  3:48PM

  @HostDZire said:

  @khalequzzaman said:

  @HostDZire said:

  @tzuli said:

  @nguyenduytan said: is it effected SG?

  Leaseweb servers are unaffected

  All Leaseweb VPS totally fine and is not effected.
  Nothing else is effected like dedicated server or other services.

  Only our own infra VPS in India and NL is effected, where we were using Vmware,
  India had lots of vps, NL had less.

  Are you sticking with VMware, or thinking about using something else like KVM?

  Before Vmware, KVM was also impacted, infact linux was impacted, so its not about vmware or kvm, nothing is safe right now due to AI.

  AI is not safe due to AI.
• zed Member

  4:10PM

  @drivex said:
  Pretty sure the VMware hosts were publicly reachable, with no security concept like firewall/vpn and/or network segmentation.

  Oo
• drivex Member

  4:47PM

  @DanSummer said:

  @drivex said:
  Pretty sure the VMware hosts were publicly reachable, with no security concept like firewall/vpn and/or network segmentation.

  How come you're pretty sure?

  Because they said this:

  we have also finalized the design of a new infrastructure and security architecture aimed at significantly reducing the risk of similar incidents in the future.

  Which is a funny statement anyway. They have been hacked and all hands are on deck to restore the services. Ok, so when did they had time to make an entire new security concept? Right, only if you had almost none in the first place.

  incident response doesn‘t work like this. After some days you barely have all the evidence gathered. Just my two cents. Maybe i‘m wrong, but i do this long enough to know how this shit works.

  Thanked by 1Void
• Void Member

  5:23PM

  @drivex said:

  @DanSummer said:

  @drivex said:
  Pretty sure the VMware hosts were publicly reachable, with no security concept like firewall/vpn and/or network segmentation.

  How come you're pretty sure?

  Because they said this:

  we have also finalized the design of a new infrastructure and security architecture aimed at significantly reducing the risk of similar incidents in the future.

  Which is a funny statement anyway. They have been hacked and all hands are on deck to restore the services. Ok, so when did they had time to make an entire new security concept? Right, only if you had almost none in the first place.

  incident response doesn‘t work like this. After some days you barely have all the evidence gathered. Just my two cents. Maybe i‘m wrong, but i do this long enough to know how this shit works.

  Assuming LET hosts follow standard incident response protocols instead of:
  
• zed Member

  5:58PM

  something pretty basic was off if it cost them their entire vmware fleet and in different locations, maybe they'll tell us eventually.

  Thanked by 1drivex