近10万个使用VPS的网站被黑

黑山老妖

http://www.neowin.net/news/main/ ... estroyed-by-hackers

As many as 100,000 websites have been destroyed by hackers targeting server virtualisation software HyperVM, which powers most virtual private server (VPS) hosting companies.

Most of the VPS systems hosted by Vaserv, and its sister companies CheapVPS and FSCKVPS were taken offline, with data on some of its servers destroyed without backups, when the hackers exploited a zero-day vulnerability in the LxLabs HyperVM software to gain root access to its servers. The hackers were then able to run commands (such as "rm -rf", Linux parlance for "remove everything, all files and folders, no questions asked,") to destroy both user and system data, preventing the servers from booting, and preventing users from recovering data.

Vaserv has estimated that almost half of the data hosted on their servers has been destroyed by the attack.

The identity of the hackers is unknown, and no hacking groups have claimed the attack. Vaserv stated that "This wasn't someone randomly scanning things. It was a deliberate attack on our infrastructure." It has also stated that, although the hackers had full root access to its systems, all sensitive data such as names, addresses, and credit card details were encrypted.

It is unknown whether any other hosting companies running HyperVM have been attacked. Anybody who uses a server hosted by Vaserv or its sister companies can check the progress of the rescue operation here.

coolioo

with data on some of its servers destroyed without backups

This is fatal...

[ 本帖最后由 coolioo 于 2009-6-15 15:16 编辑 ]

terran

恐怖，hyperVM 用的不太广泛

bulaohu

原帖由 黑山老妖 于 2009-6-15 14:59 发表
all sensitive data such as names, addresses, and credit card details were encrypted.

Like that's gonna to be helpful? If they have root and has copied the data out, it's only a matter of time before the encryption is cracked. This one is bad, really, really bad......

coolioo

It is only a matter of time, but the time could be thousands of years if the data is encrypted in the right way.

ios

随时惨重啊。

longmurphy

太恐怖了。hacker真是无孔不入。

bulaohu

原帖由 coolioo 于 2009-6-15 15:44 发表
It is only a matter of time, but the time could be thousands of years if the data is encrypted in the right way.

Depends on how you do it. If you have a super computer, congratulations; if you have implanted backdoors into thousands of PCs on the internet, you can divide the job into small pieces and have all your zombies working for you, so once again, congratulations; if you just have your own PC and the encryption is done the right way, then you are right, thousands of years it may take...

degra

原帖由 bulaohu 于 2009-6-15 15:30 发表


Like that's gonna to be helpful? If they have root and has copied the data out, it's only a matter of time before the encryption is cracked. This one is bad, really, really bad......

“all sensitive data such as names, addresses, and credit card details were encrypted.” they were encrypted, but usually in a very simple way, all you need to look at is the application source code

bulaohu

Oh that's too hard!

;)