You are here: News >> IT Security News >> ISP Denies Passwords Cause of Disastrous Hack
| » IT Security NEWS |
| |
| » 10 June 2009 |
| ISP Denies Passwords Cause of Disastrous Hack |
Rus Foster, the director of the VAServ.com Internet Service Provider (ISP), obstinately forswears accusations that deficient password management and server configurations were the factors that allowed a mass compromise to erase data across 100,000 or so websites. The UK-based ISP director was also thoroughly shocked after he found out that the head of a software firm in India committed suicide shortly after the latter's software was identified as the software involved in the security breach of the former's website host.
The suicide via hanging of K.T. Ligesh happened around the time Foster mentioned a zero-day security hole in the virtualization management application developed by Ligesh's own LxLabs, which eventually lead to the devastating hacking event. In a recent phone interview, Foster wondered if he were in some way responsible for Ligesh's suicide, and then stated that he felt exhausted by the fatal turn of events.
Foster's comments arrived a few hours after an unsigned post from one of the supposed hackers responsible for the breach alleged that Foster's repetitive use of two pairs of passwords served as a blueprint for the super-hack that utterly destroyed VAServ's system byte-by-byte. It went on to claim that the ISP's homepage operated on what is recognized as a virtualized private server, a configuration that the anonymous cyber hijacker believed made the password assault work so flawlessly.
The unidentified poster mocked Foster's assessment that the zero-day vulnerability was used for the catastrophic breach, adding that the director was giving him and his fellow hackers "too much credit".
Meanwhile, Foster himself disregarded the post because it contained fictional or erroneous details, including fraudulent IP addresses and passwords. He swears that he never used any of the passwords contained within the post, vowing that he doesn't recognize any of them. In fairness, the post was ambiguous enough to be written by anyone in the Internet trying to pull some sort of prank or attempting to tackle a issue he has no place to tackle.
Two days after huge amounts of information were abruptly erased from more than 200 VAServ-operated servers, the company's in-house technicians were somehow able to recover the lost data and restore the service for some clients. However, not all of the 100,000 to 150,000 sites hosted were able to survive the calamity. Foster warned on Monday that much of the lost data could be permanently irretrievable.
|
|