Change Language
Sun Sun Sun

You are here: News >> IT Security News >> ISP Denies Passwords Cause of Disastrous Hack

» IT Security NEWS
 
» 10 June 2009
ISP Denies Passwords Cause of Disastrous Hack
Rus Foster, the director of the VAServ.com Internet Service Provider (ISP), obstinately forswears accusations that deficient password management and server configurations were the factors that allowed a mass compromise to erase data across 100,000 or so websites. The UK-based ISP director was also thoroughly shocked after he found out that the head of a software firm in India committed suicide shortly after the latter's software was identified as the software involved in the security breach of the former's website host.

The suicide via hanging of K.T. Ligesh happened around the time Foster mentioned a zero-day security hole in the virtualization management application developed by Ligesh's own LxLabs, which eventually lead to the devastating hacking event. In a recent phone interview, Foster wondered if he were in some way responsible for Ligesh's suicide, and then stated that he felt exhausted by the fatal turn of events.

Foster's comments arrived a few hours after an unsigned post from one of the supposed hackers responsible for the breach alleged that Foster's repetitive use of two pairs of passwords served as a blueprint for the super-hack that utterly destroyed VAServ's system byte-by-byte. It went on to claim that the ISP's homepage operated on what is recognized as a virtualized private server, a configuration that the anonymous cyber hijacker believed made the password assault work so flawlessly.

The unidentified poster mocked Foster's assessment that the zero-day vulnerability was used for the catastrophic breach, adding that the director was giving him and his fellow hackers "too much credit".

Meanwhile, Foster himself disregarded the post because it contained fictional or erroneous details, including fraudulent IP addresses and passwords. He swears that he never used any of the passwords contained within the post, vowing that he doesn't recognize any of them. In fairness, the post was ambiguous enough to be written by anyone in the Internet trying to pull some sort of prank or attempting to tackle a issue he has no place to tackle.

Two days after huge amounts of information were abruptly erased from more than 200 VAServ-operated servers, the company's in-house technicians were somehow able to recover the lost data and restore the service for some clients. However, not all of the 100,000 to 150,000 sites hosted were able to survive the calamity. Foster warned on Monday that much of the lost data could be permanently irretrievable.

 


Get a Free Vulnerability Scan!

Get a Free Evaluation Unit!

How to Buy Locate a Partner!

Follow SecPoint on your
favorite Social Media!



Got a Question?
sales@secpoint.com

News
 
  Email :
     
12 March 2010
Guessing becomes as easy as 1-...
12 March 2010
New forged Windows update atta...
11 March 2010
Twitter creates new weapon aga...
 
Customer References
 
View More...
   
Product Awards
 
View More...
Privacy Statement | Link Policy | User Policy | IT Security Blog | IT Security Forum | SecPoint Pictures
Event Pictures | Exploit Archive | IT Security Web Shop | Vulnerability Library
IT Security Video | Sitemap
© Copyright 1999-2010: SecPoint®
SecPoint ApS - Lergravsvej 53 - 2300 Copenhagen S - Phone +45 70 235 245
Recent awards Compatible with Visit us on Facebook! Visit us on LinkedIn! Visit us on Myspace!
   
Facebook
Group!


Follow us on Twitter!
Anti-Spam Appliance - Anti-Spam Firewall - Unified Threat Management Appliance Anti-Virus - Web Filter Appliance - Anti Spam Appliance - Anti Spam Firewall - UTM Appliance Wifi Security - Wifi Pen Test - Wifi Crack - Wifi Hack - Wifi Audit - Wep Wpa2 Crack Vulnerability Scanner - Vulnerability Assessment - Security Scanner - Pen Test Appliance