Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!


BMail.ag - Secure Email Service
Server.net
CPLicense.net
VPS Server
Buy VPN
Vultr
VMs for AI
HostDare
ReliableSite White-Label Dedicated Hosting for Resellers
25% Recurring Discount on NVMe VPS
Try EnsoVPN - Reliable VPN - 1-Day Free Trial
InterServer VPS
BMail.ag - Secure Email Service
Best VPN
High-Performance Bare Metal Server Solutions
Karvl.com
Server Mania Cloud Hosting
DataWagon Hosting
AlphaVPS Hosting
Evoxt.com
Clouvider
VPS Hosting with NVMe
Residential IPs in the US & 4G Mobile Proxies in EU & US with Unlimited Bandwidth
ReliableSite White-Label Dedicated Hosting for Resellers
Rabisu - Hosting Solutions
CloudLinux
Try EnsoVPN - Fast & Private VPN - 1-Day Free Trial
New on LowEndTalk? Please Register and read our Community Rules.

All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.

HostDzire Hit by Ransomware Attack

123457

Comments

  • My SG VPS is Working Normally. Thank you.

  • drShankdrShank Member

    when can we expect INDIA VPS to be online?

  • AlteredParadoxAlteredParadox Member, Megathread Squad

    @drShank said:
    when can we expect INDIA VPS to be online?

    It’ll take a little longer for every “are we there yet” post he has to stop working to answer.

  • Damn! i didn't get any email from @HostDZire you should have notified the clients about the incident via email, not everyone login to control panel everyday to check announcements or checks LET.

  • DanSummerDanSummer Member
    edited August 6

    @drivex said:
    Pretty sure the VMware hosts were publicly reachable, with no security concept like firewall/vpn and/or network segmentation.

    How come you're pretty sure?

    Thanked by 1forest
  • DjIcEDjIcE Member

    hopefully we will get out servers before tomorrow,

  • @HostDZire said:

    @khalequzzaman said:

    @HostDZire said:

    @tzuli said:

    @nguyenduytan said: is it effected SG?

    Leaseweb servers are unaffected

    All Leaseweb VPS totally fine and is not effected.
    Nothing else is effected like dedicated server or other services.

    Only our own infra VPS in India and NL is effected, where we were using Vmware,
    India had lots of vps, NL had less.

    Are you sticking with VMware, or thinking about using something else like KVM?

    Before Vmware, KVM was also impacted, infact linux was impacted, so its not about vmware or kvm, nothing is safe right now due to AI.

    AI is not safe due to AI.

    Thanked by 1jsg
  • zedzed Veteran

    @drivex said:
    Pretty sure the VMware hosts were publicly reachable, with no security concept like firewall/vpn and/or network segmentation.

    Oo

  • drivexdrivex Member

    @DanSummer said:

    @drivex said:
    Pretty sure the VMware hosts were publicly reachable, with no security concept like firewall/vpn and/or network segmentation.

    How come you're pretty sure?

    Because they said this:

    we have also finalized the design of a new infrastructure and security architecture aimed at significantly reducing the risk of similar incidents in the future.

    Which is a funny statement anyway. They have been hacked and all hands are on deck to restore the services. Ok, so when did they had time to make an entire new security concept? Right, only if you had almost none in the first place.

    incident response doesn‘t work like this. After some days you barely have all the evidence gathered. Just my two cents. Maybe i‘m wrong, but i do this long enough to know how this shit works.

    Thanked by 1Void
  • VoidVoid Member

    @drivex said:

    @DanSummer said:

    @drivex said:
    Pretty sure the VMware hosts were publicly reachable, with no security concept like firewall/vpn and/or network segmentation.

    How come you're pretty sure?

    Because they said this:

    we have also finalized the design of a new infrastructure and security architecture aimed at significantly reducing the risk of similar incidents in the future.

    Which is a funny statement anyway. They have been hacked and all hands are on deck to restore the services. Ok, so when did they had time to make an entire new security concept? Right, only if you had almost none in the first place.

    incident response doesn‘t work like this. After some days you barely have all the evidence gathered. Just my two cents. Maybe i‘m wrong, but i do this long enough to know how this shit works.

    Assuming LET hosts follow standard incident response protocols instead of:

    Thanked by 2TimboJones tentor
  • zedzed Veteran

    something pretty basic was off if it cost them their entire vmware fleet and in different locations, maybe they'll tell us eventually.

    Thanked by 1drivex
  • dev127dev127 Member
    edited August 6

    Did anyone get a replacement VPS?

  • defaultdefault Veteran

    @dev127 said:
    Did anyone get a replacement VPS?

    They are working on it. Now I see something in client area, but can't install. So it is obvious @HostDZire is already on it.

    I just hope we get some improvement from this downtime and reorganization, something like /48 IPv6.

  • jsgjsg Member, Resident Benchmarker

    Don't put pressure on @HostDZire but wait patiently!

    Reason: many problems I've seen in both software and in DC's arose out of exactly that, pressure.
    And it's not needed at all! Because it's some kind of race anyway; the sooner those nodes are up and running again the lower the losses to business and reputation are, plus each day costs them customers, reputation, and money.
    Adding pressure on top of that might make ETA slightly sooner - but increase the risk of future problems.

    So, give them the time to properly plan and work and to double-check everything!

    Thanked by 1host_c
  • Skipped a bunch of pages, but I doubt I'm the first to think Velox Media will use this excuse some day when they scam/deadpool.

  • ART994ART994 Member

    I wonder if they'll fix it today or not?

  • DjIcEDjIcE Member

    So they never sent replacemnt, I was hoping they would do that last night ,
    @HostDZire please let us know how long will it take, you mentioned that all work has been done and you will sent out replacements,will wet out severs back today?

  • ManishPantManishPant Member, Host Rep

    @HostDZire Do we need to create a ticket or the affected client will get the VPS deployed automatically whenever your new node is ready?

  • @HostDZire will you offer optional prorate refund for the affected customers? i get that you guys are busy, but that is no excuse to not even do some sort of email updates.

  • HostDZireHostDZire Patron Provider, Veteran

    Update – Service Restoration Progress

    Hello Everyone,

    We would like to provide another update regarding the incident we reported earlier.

    The setup and configuration of the affected virtualization nodes has now been completed, and we have started provisioning replacement VPS instances.

    VPS services are being assigned to customer accounts one by one. Since we are restoring each service with its original IP address wherever possible, the process cannot be fully automated and requires several manual steps. As a result, provisioning takes time. Multiple members of our team, including myself, are working continuously to assign services as quickly as possible.

    We have one request for everyone: please avoid logging into the client area repeatedly to check whether your VPS has been assigned. A large number of customers checking simultaneously places additional load on the billing panel, making it slower for our staff to complete the provisioning process.

    As soon as your VPS has been assigned, an activation email will be sent automatically. You do not need to keep checking the client area, if you receive the activation email, it means your replacement VPS is ready.

    We appreciate your patience and understanding during this process. We will provide another progress update in approximately 12 hours.

    Kind Regards,
    HostDZire Team

  • DjIcEDjIcE Member

    Can you send out NL vps please, we are not hosting websites, just upload servers,

  • bachbouchbachbouch Member

    Hello,

    The only email we have received from your side is the payment reminder stating that our invoice is due in two days.

    What about the ongoing outage? Normally, invoice due dates should be extended automatically in such situations. This is already the third consecutive day that your customers have been unable to access their RDP servers, causing significant business disruption and financial losses.

    Your customers should not be expected to pay for a service that has been unavailable for three days. We expect HostDzire to acknowledge the impact of this incident by extending all affected invoices accordingly.

    We look forward to your prompt response.

  • defaultdefault Veteran

    @bachbouch said:
    Hello,

    The only email we have received from your side is the payment reminder stating that our invoice is due in two days.

    What about the ongoing outage? Normally, invoice due dates should be extended automatically in such situations. This is already the third consecutive day that your customers have been unable to access their RDP servers, causing significant business disruption and financial losses.

    Your customers should not be expected to pay for a service that has been unavailable for three days. We expect HostDzire to acknowledge the impact of this incident by extending all affected invoices accordingly.

    We look forward to your prompt response.

    Billing is one side, technical is another. Please distinguish between issues.

    The problem with ransomware is technical. Carry on with your billing, while they address the technical issues. In life you should pay the bill for internet at your home, even if you have no internet that day for technical reasons.

  • @DjIcE said:
    Can you send out NL vps please, we are not hosting websites, just upload servers,

    Thank you, your waiting time has been doubled.

  • DjIcEDjIcE Member

    Netherlands/NL Private Rdp #1
    Rdp Service :: Private Rdp - VPS Based - Netherlands/France/USA
    Active

    but cant log-in,,,

    does anyone here actually get their replacement back yet?

  • defaultdefault Veteran

    @DjIcE said:
    Netherlands/NL Private Rdp #1
    Rdp Service :: Private Rdp - VPS Based - Netherlands/France/USA
    Active

    but cant log-in,,,

    does anyone here actually get their replacement back yet?

    In the last comment from HostDZire (a couple of comments above yours) is stated the following: "As soon as your VPS has been assigned, an activation email will be sent automatically. You do not need to keep checking the client area, if you receive the activation email, it means your replacement VPS is ready."

  • Minal98Minal98 Member

    first of all , good luck for this unfortunate incident. is there any possibility of data recovery ? I didn't have enough backup as it was run as experimental service .. if you had any backup and restoring it would do loads of help for many.. I know you mentioned total loss of data.. hope you had some kind of backup

  • forestforest Member

    @Minal98 said:
    first of all , good luck for this unfortunate incident. is there any possibility of data recovery ? I didn't have enough backup as it was run as experimental service .. if you had any backup and restoring it would do loads of help for many.. I know you mentioned total loss of data.. hope you had some kind of backup

    Nope, no recovery. And no backups.

    Thanked by 2Minal98 tzuli
  • defaultdefault Veteran

    @Minal98 said:
    first of all , good luck for this unfortunate incident. is there any possibility of data recovery ? I didn't have enough backup as it was run as experimental service .. if you had any backup and restoring it would do loads of help for many.. I know you mentioned total loss of data.. hope you had some kind of backup

    There is no recovery from provider. If there was, we would have been informed. Usually providers don't want to lose customers or their data. But on low-end offers, things like this happen, precisely because we don't pay extra for backups.

    In my case I make backups. With rclone and some cheap cloud provider like Koofr or like pCloud you can automate backups outside the provider. This way if provider has serious issues due to evil people using AI, you still have your backups.

    Thanked by 2Minal98 tzuli
  • Minal98Minal98 Member

    thanks..it's a lesson I think ..

    Thanked by 1tzuli
Sign In or Register to comment.