All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
Hackers Breach Russian Hosting Provider FirstVDS and Steal Customer Data
Attackers exploited a vulnerability in ISPsystem’s VMmanager 6 platform to access part of FirstVDS’s infrastructure and copy data from customer virtual servers.
⠀
The malware mounted virtual disks in read-only mode, allowing it to steal passwords, cloud credentials, configuration files, cryptocurrency wallets and other data without leaving traces inside the affected servers.
⠀
FirstVDS has not disclosed how many customers were affected. The company told notified users to assume everything stored on impacted servers was compromised and replace passwords, keys and access tokens.
The attackers remain unidentified, and the vulnerability was reportedly not fully fixed at the time of disclosure.
SOURCE - therecord.media/russia-cyberattack-firstvds-cloud
Comments
This is a very common panel, not only among Russian providers but also east Europeans.
If it's a 0day vulnerability we can expect more breaches soon.
As always, this is why you should always install your own ISO and encrypt the drives.
Was actually thinking about grabbing a VPS from them a couple of days ago, but ended up changing my mind. Looks like I dodged a bullet.