Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!


BMail.ag - Secure Email Service
Server.net
CPLicense.net
VPS Server
Buy VPN
Vultr
VMs for AI
HostDare
ReliableSite White-Label Dedicated Hosting for Resellers
25% Recurring Discount on NVMe VPS
Try EnsoVPN - Reliable VPN - 1-Day Free Trial
InterServer VPS
BMail.ag - Secure Email Service
Best VPN
High-Performance Bare Metal Server Solutions
Karvl.com
Server Mania Cloud Hosting
DataWagon Hosting
AlphaVPS Hosting
Evoxt.com
Clouvider
VPS Hosting with NVMe
Residential IPs in the US & 4G Mobile Proxies in EU & US with Unlimited Bandwidth
ReliableSite White-Label Dedicated Hosting for Resellers
Rabisu - Hosting Solutions
CloudLinux
Try EnsoVPN - Fast & Private VPN - 1-Day Free Trial
New on LowEndTalk? Please Register and read our Community Rules.

All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.

HostDzire Hit by Ransomware Attack

1568101116

Comments

  • @HostDZire said:

    @mehargags said:
    @HostDZire pls do keep us posted... at least we will know if any progress and if you guys are onto something. Thanks and good luck

    Yes will do for sure.
    Next step is reinstall all the servers and setup it from scratch, so it will take sometime.
    But we will do as fast we can.

    What about the data? Have they threatened to make it public?

    Thanked by 1avsisp
  • MainfrezzerMainfrezzer Member
    edited August 7

    @sanchogodinho said:

    @HostDZire said:

    @mehargags said:
    @HostDZire pls do keep us posted... at least we will know if any progress and if you guys are onto something. Thanks and good luck

    Yes will do for sure.
    Next step is reinstall all the servers and setup it from scratch, so it will take sometime.
    But we will do as fast we can.

    What about the data? Have they threatened to make it public?

    I think you're mixing things up. Ransomware is encrypting your files and demanding money to decrypt it again. (Which I find funny still works as you should never do that lmao).

    *There might be a handful of cases where they might exfiltrate data, like employe data or patient data, but usually that's more of a classic breach. Nobody would ever bother downloading a shitload of vdisks.

    Thanked by 1sanchogodinho
  • @Mainfrezzer said:

    @sanchogodinho said:

    @HostDZire said:

    @mehargags said:
    @HostDZire pls do keep us posted... at least we will know if any progress and if you guys are onto something. Thanks and good luck

    Yes will do for sure.
    Next step is reinstall all the servers and setup it from scratch, so it will take sometime.
    But we will do as fast we can.

    What about the data? Have they threatened to make it public?

    I think you're mixing things up. Ransomware is encrypting your files and demanding money to decrypt it again. (Which I find funny still works as you should never do that lmao).

    *There might be a handful of cases where they might exfiltrate data, like employe data or patient data, but usually that's more of a classic breach. Nobody would ever bother downloading a shitload of vdisks.

    I thought some Ransomware groups were to also threaten to make all the data public if the amount is not paid.

    Thanked by 1Void
  • VoidVoid Member

    @sanchogodinho said:

    @Mainfrezzer said:

    @sanchogodinho said:

    @HostDZire said:

    @mehargags said:
    @HostDZire pls do keep us posted... at least we will know if any progress and if you guys are onto something. Thanks and good luck

    Yes will do for sure.
    Next step is reinstall all the servers and setup it from scratch, so it will take sometime.
    But we will do as fast we can.

    What about the data? Have they threatened to make it public?

    I think you're mixing things up. Ransomware is encrypting your files and demanding money to decrypt it again. (Which I find funny still works as you should never do that lmao).

    *There might be a handful of cases where they might exfiltrate data, like employe data or patient data, but usually that's more of a classic breach. Nobody would ever bother downloading a shitload of vdisks.

    I thought some Ransomware groups were to also threaten to make all the data public if the amount is not paid.

    What data will they make public in this case ?

  • dev127dev127 Member

    is anybody received any replacement vps till now ?

  • DjIcEDjIcE Member

    @dev127 said:
    is anybody received any replacement vps till now ?

    still waiting, nothing yet,,

  • Gosh guys, just chill. Drink water, go outside, exercise. You will get your precious VPS.

    Thanked by 2Falzo buggedout
  • DjIcEDjIcE Member

    @JohnFilch123 said:
    Gosh guys, just chill. Drink water, go outside, exercise. You will get your precious VPS.

    you wouldnt say that when you missing your 4 figures a week.. 3 days of wrok down the drainage, and still not even a single perosn gotten their servers back.

  • FalzoFalzo Veteran
    edited August 7

    @JohnFilch123 said:
    Gosh guys, just chill. Drink water, go outside, exercise. You will get your precious VPS.

    That are the ones that don't have a proper plan for bridging the gap by a temporary replacement.

    It must be hard to just spin some hourly cloud server somewhere and get everything back online for your own clients, so it"s easier to complain about upstream not getting it fixed yesterday.

    They will also complain about the provider not having backups, while having none themselves, yet getting pressured by their own clients about it.

    #cunts

  • @HostDZire said:
    Update – Service Restoration Progress

    Hello Everyone,

    We would like to provide another update regarding the incident we reported earlier.

    The setup and configuration of the affected virtualization nodes has now been completed, and we have started provisioning replacement VPS instances.

    VPS services are being assigned to customer accounts one by one. Since we are restoring each service with its original IP address wherever possible, the process cannot be fully automated and requires several manual steps. As a result, provisioning takes time. Multiple members of our team, including myself, are working continuously to assign services as quickly as possible.

    We have one request for everyone: please avoid logging into the client area repeatedly to check whether your VPS has been assigned. A large number of customers checking simultaneously places additional load on the billing panel, making it slower for our staff to complete the provisioning process.

    As soon as your VPS has been assigned, an activation email will be sent automatically. You do not need to keep checking the client area, if you receive the activation email, it means your replacement VPS is ready.

    We appreciate your patience and understanding during this process. We will provide another progress update in approximately 12 hours.

    Kind Regards,
    HostDZire Team

    Take your time. HostDzire is one of the most stable server that I have. And the dedication is truly appreciated. Let us know when servers are back online.

  • @DjIcE said:

    @JohnFilch123 said:
    Gosh guys, just chill. Drink water, go outside, exercise. You will get your precious VPS.

    you wouldnt say that when you missing your 4 figures a week.. 3 days of wrok down the drainage, and still not even a single perosn gotten their servers back.

    That your issue without proper backup plan with important data.

  • @DjIcE said:

    @JohnFilch123 said:
    Gosh guys, just chill. Drink water, go outside, exercise. You will get your precious VPS.

    you wouldnt say that when you missing your 4 figures a week.. 3 days of wrok down the drainage, and still not even a single perosn gotten their servers back.

    Sure, I would just move temporarily somewhere else and continue to earn 5 figures a week. But yeah moaning on the forum is easier.

  • @DjIcE said:

    @JohnFilch123 said:
    Gosh guys, just chill. Drink water, go outside, exercise. You will get your precious VPS.

    you wouldnt say that when you missing your 4 figures a week.. 3 days of wrok down the drainage, and still not even a single perosn gotten their servers back.

    If it is that important, then you shouldn't rely on one server. Except wife, you should always have a backup of everything.

  • @itachikonoha said:

    @DjIcE said:

    @JohnFilch123 said:
    Gosh guys, just chill. Drink water, go outside, exercise. You will get your precious VPS.

    you wouldnt say that when you missing your 4 figures a week.. 3 days of wrok down the drainage, and still not even a single perosn gotten their servers back.

    If it is that important, then you shouldn't rely on one server. Except wife, you should always have a backup of everything.

    I backed up my wife as well, don't you worry, my young and emotional friend.

  • DjIcEDjIcE Member

    seriously, not even a single person recive their servers, good work @HostDZire
    i say this, since their last update hours and hours ago,they mentioned, all work has been done, and they started with proving servers, yet no one, not even a single person recived their servers yet, bravo,

  • AlteredParadoxAlteredParadox Member, Megathread Squad

    @DjIcE said:
    seriously, not even a single person recive their servers, good work @HostDZire
    i say this, since their last update hours and hours ago,they mentioned, all work has been done, and they started with proving servers, yet no one, not even a single person recived their servers yet, bravo,

    Thanked by 3CheepCluck RIYAD jsg
  • zedzed Veteran

    @DjIcE said:
    seriously, not even a single person recive their servers, good work @HostDZire
    i say this, since their last update hours and hours ago,they mentioned, all work has been done, and they started with proving servers, yet no one, not even a single person recived their servers yet, bravo,

    i feel you man and i'd be annoyed too but no matter how you slice it this is a pretty major event so try to keep calm and not burn bridges while emotional.

    Thanked by 2rpqu AlteredParadox
  • @DjIcE said:
    seriously, not even a single person recive their servers, good work @HostDZire
    i say this, since their last update hours and hours ago,they mentioned, all work has been done, and they started with proving servers, yet no one, not even a single person recived their servers yet, bravo,

    Maybe you're just last in line 😏

  • AlteredParadoxAlteredParadox Member, Megathread Squad

    The amount of people on LET who pay for one relatively cheap box, often at a place that explicitly states no backups, and then use it for something that (whether actually or just in their head) has some "mission critical" use case that can't stand to be down for an hour, let alone a few days... but have no backups, no plan for downtime, and seemingly not enough knowledge to recover during an issue... is just... yikes. This should honestly be basic stuff, folks... and if not you should be paying a lot more for "managed" services with backups where the provider takes care of the issues for you.

  • avsispavsisp Member, Patron Provider
    edited August 7

    Really sorry this is happening to you guys. Seems like everyday, hosts are targetted with something. If it isn't hacking, it's ransomeware, exploits, or DDoS. It's sad to see - and I really hope you guys recover well. I did notice it said it's client responsibility to recover their own data - my question for @HostDZire is only this: Did you guys have off-site backups (for example we use Herzner servers proudly as an off-site backup with only access through restricted upload-only keys and no permissions for delete or anything from the remote (host servers) side) or did those backups also get corrupted as I've seen in a few other cases due to shared full-access to the effected host-nodes? (genuinely curious - I'm seeing loads of hacks happening effecting backups and curious as to what failed there)

    I hope you guys a speedy and clean recovery <3

  • avsispavsisp Member, Patron Provider

    @AlteredParadox said:
    The amount of people on LET who pay for one relatively cheap box, often at a place that explicitly states no backups, and then use it for something that (whether actually or just in their head) has some "mission critical" use case that can't stand to be down for an hour, let alone a few days... but have no backups, no plan for downtime, and seemingly not enough knowledge to recover during an issue... is just... yikes. This should honestly be basic stuff, folks... and if not you should be paying a lot more for "managed" services with backups where the provider takes care of the issues for you.

    There's no such thing as host-provided backups. Proper people who want real redundancy and backups run systems with low DNS ttl + full-clone backup systems known as "hot spares" ready to go. Host backups are like keeping your money in the bank, but without FDIC insurance - expecting only them to remember it was there - even after someone burns down the bank and steals all the money...

  • @AlteredParadox said: The amount of people on LET who pay for one relatively cheap box

    But you do not understand, I am losing gazillions :lol:

  • AlteredParadoxAlteredParadox Member, Megathread Squad

    @avsisp said:

    @AlteredParadox said:
    The amount of people on LET who pay for one relatively cheap box, often at a place that explicitly states no backups, and then use it for something that (whether actually or just in their head) has some "mission critical" use case that can't stand to be down for an hour, let alone a few days... but have no backups, no plan for downtime, and seemingly not enough knowledge to recover during an issue... is just... yikes. This should honestly be basic stuff, folks... and if not you should be paying a lot more for "managed" services with backups where the provider takes care of the issues for you.

    There's no such thing as host-provided backups. Proper people who want real redundancy and backups run systems with low DNS ttl + full-clone backup systems known as "hot spares" ready to go. Host backups are like keeping your money in the bank, but without FDIC insurance - expecting only them to remember it was there - even after someone burns down the bank and steals all the money...

    I like this guy. Maybe I shall go look at their vps'

    Thanked by 1avsisp
  • avsispavsisp Member, Patron Provider
    edited August 7

    @AlteredParadox said:

    @avsisp said:

    @AlteredParadox said:
    The amount of people on LET who pay for one relatively cheap box, often at a place that explicitly states no backups, and then use it for something that (whether actually or just in their head) has some "mission critical" use case that can't stand to be down for an hour, let alone a few days... but have no backups, no plan for downtime, and seemingly not enough knowledge to recover during an issue... is just... yikes. This should honestly be basic stuff, folks... and if not you should be paying a lot more for "managed" services with backups where the provider takes care of the issues for you.

    There's no such thing as host-provided backups. Proper people who want real redundancy and backups run systems with low DNS ttl + full-clone backup systems known as "hot spares" ready to go. Host backups are like keeping your money in the bank, but without FDIC insurance - expecting only them to remember it was there - even after someone burns down the bank and steals all the money...

    I like this guy. Maybe I shall go look at their vps'

    Thanks <3

    Go read this if you feel like it: https://www.avsisp.com/blog/hosting-news/hypervisor-ransomware-surge/

    Especially "KVM, and one point against our own interest" section...

    Every VM client on all hosts should... tbh.

    Quoted for all here:

    And here's the part that runs against our own commercial interest: don't keep your only backup with us. We run four countries, and a second VPS at another of our sites, from €5/mo, can be used as a separate copy that survives a regional or jurisdictional failure. We don't sell a managed backup product, and that arrangement is one you build yourself. It also doesn't help if the failure is us. For that you need a copy at a provider whose credentials we've never seen.

    Any hosting company that tells you otherwise is selling you a single point of failure with a redundancy sticker on it.

    Thanked by 1AlteredParadox
  • @avsisp said:

    @AlteredParadox said:
    The amount of people on LET who pay for one relatively cheap box, often at a place that explicitly states no backups, and then use it for something that (whether actually or just in their head) has some "mission critical" use case that can't stand to be down for an hour, let alone a few days... but have no backups, no plan for downtime, and seemingly not enough knowledge to recover during an issue... is just... yikes. This should honestly be basic stuff, folks... and if not you should be paying a lot more for "managed" services with backups where the provider takes care of the issues for you.

    There's no such thing as host-provided backups. Proper people who want real redundancy and backups run systems with low DNS ttl + full-clone backup systems known as "hot spares" ready to go. Host backups are like keeping your money in the bank, but without FDIC insurance - expecting only them to remember it was there - even after someone burns down the bank and steals all the money...

    If provider state triplicate mean you spend 3 times without fdic, really good analogy.

  • AlteredParadoxAlteredParadox Member, Megathread Squad

    @JohnFilch123 said:

    @AlteredParadox said: The amount of people on LET who pay for one relatively cheap box

    But you do not understand, I am losing gazillions :lol:

    Like... I'm not running anything business/production critical on mine, so I do nightly backups and if i need something back ill restore it to a new box - but to @avsisp point, if you were... exactly what he said. I still think a middle ground for some of the clueless folks would be a place that has a managed offering and offsite backups, but I don't disagree with him at all that the proper way to do it is keeping everything replicated and ready to go :)

    Thanked by 2avsisp JohnFilch123
  • nabinnabin Member

    @CheepCluck said:

    @DjIcE said:
    seriously, not even a single person recive their servers, good work @HostDZire
    i say this, since their last update hours and hours ago,they mentioned, all work has been done, and they started with proving servers, yet no one, not even a single person recived their servers yet, bravo,

    Maybe you're just last in line 😏

    I recently got login details of 1 of my server. Waiting for others.
    The mail says

    Dear ....,

    We have received your order and appreciate your business!
    Your IN CloudVPS #3 ( LET Special ) have been ACTIVATED & Ready for use.

  • @nabin said:

    @CheepCluck said:

    @DjIcE said:
    seriously, not even a single person recive their servers, good work @HostDZire
    i say this, since their last update hours and hours ago,they mentioned, all work has been done, and they started with proving servers, yet no one, not even a single person recived their servers yet, bravo,

    Maybe you're just last in line 😏

    I recently got login details of 1 of my server. Waiting for others.
    The mail says

    Dear ....,

    We have received your order and appreciate your business!
    Your IN CloudVPS #3 ( LET Special ) have been ACTIVATED & Ready for use.

    Ipv6 or shame

  • avsispavsisp Member, Patron Provider
    edited August 7

    @AlteredParadox said:

    @JohnFilch123 said:

    @AlteredParadox said: The amount of people on LET who pay for one relatively cheap box

    But you do not understand, I am losing gazillions :lol:

    Like... I'm not running anything business/production critical on mine, so I do nightly backups and if i need something back ill restore it to a new box - but to @avsisp point, if you were... exactly what he said. I still think a middle ground for some of the clueless folks would be a place that has a managed offering and offsite backups, but I don't disagree with him at all that the proper way to do it is keeping everything replicated and ready to go :)

    If you can't do another provider entirely, many people already have a backup storage for their phones or laptops already -- at least the DB dump on a cron + file system parts used in a tar.gz could be easily nightly backup to that. Most provide Linux plugins - ---for example Google Drive I KNOW you can easily integrate into your Linux box...

    I'm not asking people to spend million on duplicate VMs - don't get me wrong - it depends on your own downtime risk tolerance, ability to respond fastly and fix it, and TTL of your own DNS entries and so on.

    Thanked by 2rpqu AlteredParadox
  • nabinnabin Member

    @Motion3549 said:

    @nabin said:

    @CheepCluck said:

    @DjIcE said:
    seriously, not even a single person recive their servers, good work @HostDZire
    i say this, since their last update hours and hours ago,they mentioned, all work has been done, and they started with proving servers, yet no one, not even a single person recived their servers yet, bravo,

    Maybe you're just last in line 😏

    I recently got login details of 1 of my server. Waiting for others.
    The mail says

    Dear ....,

    We have received your order and appreciate your business!
    Your IN CloudVPS #3 ( LET Special ) have been ACTIVATED & Ready for use.

    Ipv6 or shame

    They have not mentioned anything about IPv6. Also i am still unable to access Client area.
    Still it says: Down for Maintenance (Err 3)

Sign In or Register to comment.