{"id":282069,"date":"2018-10-29T11:02:12","date_gmt":"2018-10-29T09:02:12","guid":{"rendered":"https:\/\/mybroadband.co.za\/news\/?p=282069"},"modified":"2018-10-29T11:04:00","modified_gmt":"2018-10-29T09:04:00","slug":"internet-solutions-denies-ransomware-infection-after-hosting-attack","status":"publish","type":"post","link":"https:\/\/mybroadband.co.za\/news\/security\/282069-internet-solutions-denies-ransomware-infection-after-hosting-attack.html","title":{"rendered":"Internet Solutions denies ransomware infection after hosting attack"},"content":{"rendered":"<p>Clients of Internet Solutions\u2019 hosting services have told MyBroadband that attackers breached their servers and infected them with ransomware, encrypting their data and demanding money to get the decryption key.<\/p>\n<p>Other clients said that they noticed other troubling activity prior to IS disclosing the problem, as if there were attackers roaming around inside the network.<\/p>\n<p>In addition to deploying ransomware, people with servers and virtual servers in Internet Solutions said they detected exploitation toolkits, including remote access trojans, being deployed on machines.<\/p>\n<p>However, Internet Solutions has denied that it has suffered a data or security breach.<\/p>\n<p>\u201cThe infrastructure layer has not been compromised by malware or remote access trojans, but rather [it is] a matter of irregularities [which were] detected by our internal monitoring systems on certain hosting services,\u201d IS CTO Kervin Pillay told MyBroadband.<\/p>\n<p>Pillay said that the \u201cirregular activity\u201d they detected is still under investigation.<\/p>\n<p>\u201cWe are unable to comment on behalf of our clients as to whether they have been compromised outside of IS systems control,\u201d Pillay said.<\/p>\n<p>Internet Solutions recently sent out a notice to its hosting customers to <a href=\"https:\/\/mybroadband.co.za\/news\/cloud-hosting\/281167-internet-solutions-warns-of-security-breach.html\"><strong>warn them about the breach<\/strong><\/a>, and urged them to change their passwords and take additional steps to secure their servers.<\/p>\n<p>The notice was signed by Pillay and informed clients that Internet Solutions detected \u201cirregular activity\u201d in the following environments:<\/p>\n<ul>\n<li>Cloud Virtual Services<\/li>\n<li>Standard Virtual Machine<\/li>\n<li>Virtual Data Centre<\/li>\n<li>SkyLight<\/li>\n<li>Leased Server<\/li>\n<\/ul>\n<p>There was no \u201cirregular activity\u201d in its Cloud Virtual Machine and Ignite Cloud Server environments.<\/p>\n<p>Pillay told clients in the notice that they should change the password for each virtual and physical machines hosted in Internet Solutions\u2019 data centres.<\/p>\n<h3 class=\"my-4\">Now read: <a href=\"https:\/\/mybroadband.co.za\/news\/security\/276307-how-to-check-if-your-data-was-stolen-in-recent-leaks-and-breaches.html\">How to check if your data was stolen in recent leaks and breaches<\/a><\/h3>\n","protected":false},"excerpt":{"rendered":"<p>Clients of Internet Solutions\u2019 hosting services have told MyBroadband that attackers breached their servers and infected them with ransomware.<\/p>\n","protected":false},"author":15,"featured_media":229919,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_sma_x_autopost_status":"idle","_sma_x_autopost_error":"","_sma_x_post_id":"","_sma_facebook_post_id":"","_sma_instagram_post_id":"","_sma_threads_post_id":"","_sma_x_attempts":0,"footnotes":""},"categories":[27],"tags":[35,20077,54781],"class_list":["post-282069","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security","tag-headline","tag-internet-solutions-is","tag-kervin-pillay"],"_links":{"self":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/282069"}],"collection":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/users\/15"}],"replies":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/comments?post=282069"}],"version-history":[{"count":1,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/282069\/revisions"}],"predecessor-version":[{"id":282233,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/282069\/revisions\/282233"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media\/229919"}],"wp:attachment":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media?parent=282069"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/categories?post=282069"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/tags?post=282069"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}