Hackers exploited a software vulnerability to steal sensitive information from customers of FirstVDS, a major Russian hosting provider. The attackers accessed passwords, credentials, configuration files, and cryptocurrency wallet data stored on customer virtual servers. The breach was discovered Saturday and affected only portions of the company’s infrastructure. FirstVDS stated that customer operations were not disrupted during the attack.
The vulnerability was found in VMmanager 6, a virtualization management platform created by Russian software company ISPsystem. Hackers deployed malware that copied data from customer servers by mounting their disks in read-only mode, leaving no traces of the attack. FirstVDS disabled external access to the vulnerable system and advised affected customers to change their passwords. Although ISPsystem released patches, the vulnerability has not been completely resolved, and the company continues operating with limited functionality.
Source: Read the full story at The Record
This summary was written with AI assistance from the linked source.
Send this to yourself, or to someone who should see it
Enter your email and we will send you a link to this article.
