Hackers wipe 100,000 websites from hosting company Vaserv
June 10th, 2009 - 1:57 am ICT by John Le Fevre
- An English website hosting company may have lost the data for over 100,000 websites after hackers exploited a security vulnerability in software used to provide customers with hosting facilities.
According to Rus Foster, the company’s director, hackers managed to gain access to the root level of a key piece of software the company uses to provide its low-cost virtual website solutions.
“We were hit by a zero-day exploit” in HyperVM, a virtualization application made by LXLabs in Bangalore, India.
Foster said he’s been unable to reach anyone at LXLabs to discuss the suspected vulnerability, but data for about half of the websites hosted on Vaserv was destroyed all at once sometime Sunday evening.
Foster said about 50 percent of Vaserv’s customers used an unmanaged service, which doesn’t include data backup. As a result, at least half the websites that were hosted on the site remain offline.
Daniel Voyce, a web developer for Nu Order Webs, said, given the high level of server access they [the hackers] gained, [they] were likely able to intercept a wealth of sensitive data stored on Vaserv’s servers.
After 48-hours of frantic recovery attempts, Vaserv reported in a posting on its website that at least 24 virtual servers had suffered total data loss, as too had at least nine out of 33 nodes.
The company said it would provide customers who lost data with a new virtual private server on a new platform and provide two months free hosting as compensation.
Foster said it would depend on each customer whether they had their own backups of their websites, but he suspected many may have lost all of their internet presence.
So far no one is known to have claimed responsibility for the attack, which Foster said was, “a deliberate attack on our infrastructure.”
Related Stories
- ResellersPanel Automates Script Installation - Nov 02, 2009
- ResellersPanel Launches a Free PHP Script Installation Website - Nov 28, 2008
- The top 100 Dirtiest Sites enlisted - Aug 20, 2009
- Brit school, govt websites hacked to sell Viagra, pornography - Jun 15, 2009
- Microsoft says Internet Explorer users at risk of hacking - Dec 17, 2008
- Critical security patches for Windows issued today - Aug 13, 2009
- Netmagic unveils green data centre in Chennai - Oct 06, 2009
- Men are the best tippers - Jun 14, 2009
- China's new online porn filters could put each PC at increased hacking risk - Jun 11, 2009
- ESPN star Erin Andrews' naked video being used by hackers to attack PC's - Jul 21, 2009
- backups
- bangalore india
- deliberate attack
- hackers
- hosting company
- infrastructure
- internet presence
- recovery attempts
- root level
- rus
- security vulnerability
- sensitive data
- sunday evening
- vaserv
- virtual private server
- virtual servers
- web developer
- website solutions
- zero day
Posted in Technology Industry News, |
June 10th, 2009 at 5:34 am
My friends business website has been destroyed because of that crash. Website backups are very important, we had learned a hard way. Its hard to rely on the web hosts these days months ago our web host has gone out of business. Our site along with the contents vanished of the Internet. We had to recreate the whole thing all over again and waste 5 weeks and almost 3k on rebuilding from scrach. You should always be using an automated backup software or service. We use http://www.websitebackup.ca for mirroring our website on weekly basis. Good luck to all the folks who lost their sites.
Carson.
June 11th, 2009 at 5:12 pm
I am one of the client of Vaserv and I am currently having issue with my website. But I am sure Rus and his team will be nice enough to all the clients and they will help us.