FirstVDS says hackers stole customer data via a VMmanager 6 flaw
Original title: Hackers steal customer data from major Russian hosting provider FirstVDS
Malware mounted some customers' virtual disks read-only and copied passwords, credentials, configs and wallets without stopping the servers.
Russian hosting provider FirstVDS said attackers exploited a vulnerability in ISPsystem's VMmanager 6 and deployed malware that copied data from part of its customer virtual servers. Stolen material included passwords, cloud credentials, configuration files and cryptocurrency wallets, sent to an attacker-controlled server. FirstVDS disabled external access to the management system; ISPsystem has issued patches, but FirstVDS says the flaw is not fully fixed and the vendor advised keeping the interface closed.
Unconfirmed: Attacker identity, motives, affected versions, initial exploit method and any later use of stolen data are undisclosed.
- The breach was discovered Saturday and did not disrupt virtual server operations.
- Malware mounted disks read-only, so affected servers showed no attack traces.
- FirstVDS told notified customers to change passwords and access credentials.
- How many customers or servers were compromised was not disclosed.
- ISPsystem's Monday overnight update still left the vulnerability incompletely fixed.
Impact: Customer passwords, credentials, wallets and files copied
| Product | Affected |
|---|---|
| ISPsystem VMmanager 6 | — |
- 1.Change passwords and access credentials if FirstVDS notified you.
- 2.Keep external access to the VMmanager management interface disabled until further updates.
- Vendors
- ISPsystem
- Products
- VMmanager 6
- Victims
- FirstVDS
- Countries
- Russia
From the original article
2 min read at therecord.mediaHackers have stolen passwords, access credentials and other sensitive data belonging to customers of Russian hosting provider FirstVDS after exploiting a vulnerability in software used to manage its servers.
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.