Internet Solutions denies ransomware infection after hosting attack

[Jamie McKane]

Internet Solutions denies ransomware infection after hosting attack

Clients of Internet Solutions’ hosting services have told MyBroadband that attackers breached their servers and infected them with ransomware, encrypting their data and demanding money to get the decryption key.

Other clients said that they noticed other troubling activity prior to IS disclosing the problem, as if there were attackers roaming around inside the network.

 

[Solitude]

I wonder if this is related:
https://mybroadband.co.za/forum/threads/afrihost-cloud-server-issue.960773/

 

[The_Hobbit]

I wonder if this is related:
https://mybroadband.co.za/forum/threads/afrihost-cloud-server-issue.960773/

Interesting problem there - probably another client server with malware on it trying to hit your server. Good lockdown exercise.
The IS issue is likely related to the individual clients systems. If they're self-managed, then they're responsible to keep the nasties out. IS themselves shouldn't have direct access to their file systems AFAIK?

 

[ld13]

Odd. Got an email from a specialist over the weekend/today - their data is being held ransom for $40 000 and will not pay. They are busy re-capturing all their patient files by hand. I am still trying to get more info but it sounds related to this article as it does not seem to be the normal ransomware that locks your PC etc.

 

[r00igev@@r]

Ta da
https://www.reuters.com/investigates/special-report/china-cyber-cloudhopper/