iBurst hacked
Okay, first of all. Apologies to everyone who thought our last mail was for real.
We just needed to get some public awareness and pressure going and we felt this would be the best way.
We hope iBurst will take our recommendations into consideration and secure their damn servers properly.
Oh, and the only reason every subscriber didn't get the mail was due to the fact that they are so inefficient, their script and server couldn't handle the load.
Another mail has been sent to channel partners which reads (please could the channel partners confirm its delivery):
As you may or may not know. A mail has been circulating as of late detailing changes to our packages and products.
This mail was indeed a hoax. However, we can confirm that this mail was sent directly from our mail servers. (IT WAS NOT SPAM FROM AN EXTERNAL SOURCE) In other words we were compromised, and so was all your information.
Whilst yesterday was meant to be a day of celebration for the South African iBurst user, today is a day of mourning. Another South African ISP with egg on their face and their inefficiencies shining through.
We can assure that as a good corporate citizen. iBurst and WBS will be resolving these security flaws and will be providing you with better more efficient service in the future. Maybe. We're still thinking about it.
View screenshots of a compromised server here: Removed at the request of iBurst due to copyright violation
P.S - We would also like to confirm that the individuals who compromised the server did so in order to highlight these vulnerabilities, and did not in anyway shape or form use any information obtained.