Our Success is in our members who value our strength as a valued community.
Forum Stats
12328 Members
65 Forums
73254 Topics
989076 Posts
29 posts in the last 24hrs
Max Online: 7831 @ 8th Apr 2013 4:18pm
Who's Online - Click Me
81 registered (alan128, 12 invisible), 1412 Guests and 270 Spiders online.
Key: Admin, Global Mod, Mod
Social Media : Follow Us


(Views 7days)This Weeks Most Read
Finsbury Park mosque. 955
Round the Wirral with a movie camera[1934] 431
Code reader 319
Washing machine 192
Range Rover P38A Air Suspension Help Needed 135
Loving Home Wanted For 3 Cats. 116
Ant and Dec 95
Shotwick - Old And New (Hall and Solar Farm) 77
Another Scam 72
Wanted roof box 65
New General Forums
Ant and Dec
by cools
18th Jun 2017 2:11pm
Another Scam
by Excoriator
18th Jun 2017 10:00am
Happy birthday Ste
by Dilly
12th Jun 2017 7:54am
Happy birthday Neddy
by Dilly
10th Jun 2017 11:06am
New Wirral History
Round the Wirral with a movie camera[1934]
by snowhite
16th Jun 2017 2:03pm
Bascule Bridge
by Sufee
6th Jun 2017 9:09pm
Pathe news short - merseytunnel 1934
by oldpm01
5th Jun 2017 1:57pm
1878 Post Office Directory of Cheshire query
by derekdwc
1st Jun 2017 10:41pm
Bakery at 275 Poulton Road 1925 onwards
by JAFitz
30th May 2017 8:59pm
Forum Tips
Photo Gallery Forums
wirral from Liverpool big wheel
New Brighton Big Wheel
Topic Replies
Where In The Wirral Is It??
by fish5133
1 second ago
Suspended sentence for 37,000 benefit fraud mum
by Mark
40 minutes 27 seconds ago
What song are you listening to?
by granny
Today at 10:18 AM
live webcam from africa, a must see
by granny
Today at 09:49 AM
VW t4 fixed side window replacement
by Mike72
Today at 08:00 AM
Sailing volunteers
by diggingdeeper
Today at 12:34 AM
Finsbury Park mosque.
by fish5133
Yesterday at 11:48 PM
Bromborough Central Power Station
by Jimbo620
Yesterday at 07:19 PM
Range Rover P38A Air Suspension Help Needed
by Martin1943
Yesterday at 07:18 PM
June
M Tu W Th F Sa Su
1 2 3 4
5 6 7 8 9 10 11
12 13 14 15 16 17 18
19 20 21 22 23 24 25
26 27 28 29 30
Recent Posts : What's On ?
Shotwick - Old And New (Hall and Solar Farm)
by diggingdeeper
18th Jun 2017 11:41am
Sefton Park
by diggingdeeper
17th Jun 2017 7:28pm
Topic Options
Rate This Topic
#326822 - 8th Jun 2009 10:39pm 100,000 Websites Wiped Out By ZeroDay Exploit
MattLFC Offline
Wiki Master

Registered: 14th Aug 2004
Posts: 22315
Loc: Moreton/Beirut/Mobile
Originally Posted By: The Register, and my good friend Russell :-)
A large internet service provider said data for as many as 100,000 websites was destroyed by attackers who targeted a zero-day vulnerability in a widely-used virtualization application.

Technicians at UK-based Vaserv.com were still scrambling to recover data on Monday evening UK time, more than 24 hours after unknown hackers were able to gain root access to the company's system, Rus Foster, the company's director told The Register. He said the attackers were able to penetrate his servers by exploiting a critical vulnerability in HyperVM, a virtualization application made by a company called LXLabs.

"We were hit by a zero-day exploit" in version 2.0.7992 of the application, he said. "I've heard from other people they've been hit by the same thing." Foster said he's been unable to reach anyone at LXLabs to discuss the suspected vulnerability. The Register has also received no response to inquiries sent to the company, which according to its website is located in Bangalore.

According to Foster, data for about half of the websites hosted on Vaserv was destroyed all at once sometime Sunday evening, shortly after administrators noticed "strangeness" on the system. The attackers had the ability to execute sensitive Unix commands on the system, including "rm -rf," which forces a recursive delete of all files.

All a can say is, it wasnt me! bananalama

The Register

Top
Google Ads
#326826 - 8th Jun 2009 11:03pm Re: 100,000 Websites Wiped Out By ZeroDay Exploit [Re: MattLFC]
diggingdeeper Offline

Wiki Master

Registered: 9th Jul 2008
Posts: 10267
Loc: Birkenhead
I think this is the same company - News article

"High Availability, Virtualisation and Disaster Recovery Solutions Now Available From VAServ"
_________________________
In a time of universal deceit - telling the truth is a revolutionary act. George Orwell

When the debate is lost, slander becomes the tool of the loser. Socrates

Top
#326827 - 8th Jun 2009 11:07pm Re: 100,000 Websites Wiped Out By ZeroDay Exploit [Re: diggingdeeper]
MattLFC Offline
Wiki Master

Registered: 14th Aug 2004
Posts: 22315
Loc: Moreton/Beirut/Mobile
The scary thing is, there is still hundreds of hosts still using HyperVM... I mean, come on!!!!

hammer

Top
#326829 - 8th Jun 2009 11:34pm Re: 100,000 Websites Wiped Out By ZeroDay Exploit [Re: MattLFC]
Tony_1985 Offline

Forum Master

Registered: 19th Aug 2006
Posts: 2421
Loc: Ellesmere Port
The server my sites and my mates sites are all hosted on are unaffected as yet

We use LXadmin, but i think after this he might change over

Top
#326832 - 8th Jun 2009 11:53pm Re: 100,000 Websites Wiped Out By ZeroDay Exploit [Re: Tony_1985]
MattLFC Offline
Wiki Master

Registered: 14th Aug 2004
Posts: 22315
Loc: Moreton/Beirut/Mobile
Dont touch LX Labs with a bargpole man, all their software appears to be ridiculed with security issues and they dont seem to give a damn. If its running HyperVM, tell him (or his providers) to shut it down at once. If in doubt just take a look at WHT right now, its in absolute disarray with the fallout...

This issue was believed to have been reported to them on the 24th May, yet the zero day strike was Sunday 7th June, they had claimed to have fixed all the flaws with a the issuing of a security patch on Saturday, obviously they were lying.

The pathetic thing is, if they had announced the issues to their partners, it would have simply been a case of shut down HyperVM until the issues were resolved, now though, they have caused an obscene amount of damage and will hopefully go bankrupt as a result of it.

Top
#326852 - 9th Jun 2009 10:13am Re: 100,000 Websites Wiped Out By ZeroDay Exploit [Re: MattLFC]
MattLFC Offline
Wiki Master

Registered: 14th Aug 2004
Posts: 22315
Loc: Moreton/Beirut/Mobile
OMFG, serious shit...

LX Labs Boss Commits Suicide After Exploit Wipes Out 100,000 Websites

Originally Posted By: The Register
The boss of Indian software firm LxLabs was found dead in a suspected suicide on Monday.

Reports of the death of K T Ligesh, 32, come in the wake of the exploitation of a critical vulnerability in HyperVM, a virtualization application made by LXLabs, to wipe out data on 100,000 sites hosted by the UK web hosting firm VAserv.

The effect of his death on the development of updated software by LxLabs is unknown at time of writing.

Ligesh was found hanged in his Bangalore house on Monday morning, after a late night drinking session. The Times of India reports that he was upset with the loss of a recent contract. Ligesh was also still coming to terms with the suicides by hanging of his sister and mother five years ago.

Security researchers at Milw0rm warn that the Kloxo (formerly Lxadmin) web hosting platform from LxLabs contains 24 security vulnerabilities and exploits. The flaws include SQL injection vulnerabilities and flaws that create a way for hackers to gain file access to files hosted on a vulnerable system.

The vulnerabilities are confirmed to affect Klaxo version 5.75, though other versions may also be affected. Milw0rm went public with an alert on the vulnerability last Thursday after failing to hear back from LxLabs in what it considered to be a timely manner.

Jeeze, I have spent upwards of the last 40 hours, with no sleep and little to eat since Saturday night (too busy and lost appetite lol) sorting out all the crap thanks to this, but no way in hell would I have ever wished this. His software may have caused millions of pounds worth of damage to companies, organisations etc, but at the end of the day its just money and time, shit happens and were used to it in this industry, I really feel for the guys family and friends and am so sorry these has caused such a tragic event.

It all seemed very exciteable, something to talk about within the inustry and lots of mess to clear up, which is what we admins do best (and in all honesty, its our job at the end of the day), but this just puts it into perspective, and suddenly its not so much fun now, and very muted.

And to top things off, BlueSquare Data have now announced they will be taking over the operations of VAServ, very sad for me as I have worked with VAServ for 5 years now and treated well throughout by Rus and the team, I have a feeling the service won't be so friendly or personal with BlueSquare - the boss Matthew Munson is a likeable chap, I know from dealing with Poundhost on occasion, but the company is just far too big. It makes sense as VAServ colocate in BlueSqaure III and have their UK offices there, and also BlueSquare have their own in-house developed alternative to HyperVM, but still... Rus has cited since the announcement, a major factor in the decision is relating to him feeling part-responsibility for the guys death, which of course is silly, but I can understand where he coming from, he must be so emotionally and physically drained right now, I really feel for him and fully understand his decision.

A very sad day for the industry. frown

Top

Moderator:  Mod 
Random Wirral Images

Click to View Topic.
Newest Topics
VW t4 fixed side window replacement
by Mike72
Today at 08:00 AM
Range Rover P38A Air Suspension Help Needed
by Martin1943
20th Jun 2017 8:06pm
Loving Home Wanted For 3 Cats.
by DavidC
20th Jun 2017 8:32am
Finsbury Park mosque.
by Beethoven
19th Jun 2017 11:42am
Loving Home Wanted For 3 Cats.
by DavidC
18th Jun 2017 6:02pm
For Sale & Free
Washing machine
by GingerTom
20th Jun 2017 9:05pm
22" full 1080p hd and freeview tv
by monsterz4
20th Jun 2017 8:50pm
Apple TV box the 1gen
by monsterz4
20th Jun 2017 8:48pm
42 lf smart tv
by stumpyduck
20th Jun 2017 8:15pm
Wanted roof box
by monsterz4
19th Jun 2017 10:32am
Featured Member
Registered: 5th Jun 2010
Posts: 1406
Newest Members
Fairz87, mikerobbo84, Robbo1960, Gwhiz03, SamphireGreen
12328 Registered Users
Today's Birthdays
No Birthdays
New Wirral Info
Shotwick - Old And New (Hall and Solar Farm)
by diggingdeeper
15th Jun 2017 10:19pm
Sefton Park
by diggingdeeper
15th Jun 2017 10:02pm
Property Law
by lau2908
14th Jun 2017 8:04pm
van driver needed
by futurepast
14th Jun 2017 7:34pm
Sailing volunteers
by dogsbrain
14th Jun 2017 4:31pm
News : New Topics
Finsbury Park mosque.
by Beethoven
19th Jun 2017 11:42am
Grenfell Tower - Notting Hill
by diggingdeeper
14th Jun 2017 5:13am
Manchester airport
by Dilly
9th Jun 2017 6:01pm
helicopter landing irby park
by fish5133
7th Jun 2017 12:22am
LOST: Car key
by little_pob
31st May 2017 7:37pm
New Enthusiast Forums
VW t4 fixed side window replacement
by Mike72
Today at 08:00 AM
Range Rover P38A Air Suspension Help Needed
by Martin1943
20th Jun 2017 8:06pm
Loving Home Wanted For 3 Cats.
by DavidC
20th Jun 2017 8:32am
Loving Home Wanted For 3 Cats.
by DavidC
18th Jun 2017 6:02pm
Code reader
by madrob
16th Jun 2017 9:09am
(Views 24hrs)Trending Newest Topics
VW t4 fixed side window replacement 22
Wirral Sunrise Sunset
Sunrise Thu 4:43am
Sunset Thu 9:45pm
Local Time Thu 7:25pm
WikiWirral Can . . . .