Surfshark Systems Targeted by Hackers
Surfshark discloses hackers accessed a misconfigured internal test server; no user data or VPN services affected.
Surfshark discovered on August 31 that a threat actor accessed an internal test server exposed to the internet through misconfiguration, obtaining some system binaries and internal configurations. Build-related credentials committed to code history were rotated, and an isolated content optimization VPS was also accessed, though no user data, encryption keys, or browsing activity were exposed. The company contained the system, rotated credentials, and announced an independent security audit.
- Misconfigured internal test server was internet-accessible and breached
- Exposed data included system binaries and internal service configurations
- Build credentials were rotated; did not grant access to user data
- Isolated content accessibility optimization VPS also accessed by attacker
- Independent security audit of broader infrastructure planned
- Vendors
- Surfshark
- Products
- Surfshark VPN
- Victims
- Surfshark
- Organizations
- Surfshark
From the original article
1 min read at securityweek.com
A misconfigured test server containing engineering material, including internal configurations, was accessed by threat actors. The post Surfshark Systems Targeted by Hackers appeared first on SecurityWeek.
By Ionut Arghire · securityweek.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.