OVH hosting servers hacked

FanJ · Jul 23, 2013

http://status.ovh.net/?do=details&id=5070

Hello,

A few days ago, we discovered that the security of our internal network at our offices in Roubaix had been compromised. After internal investigations, it appeared that a hacker was able to obtain access to an email account of one of our system administrators. With this email access, they was able to gain access to the internal VPN of another employee. Then with this VPN access, they were able to compromise the access of one of the system administrators who handles the the internal backoffice.
Click to expand...

Read more at above link.

I guess I'd better leave this topic to our French and Canadian friends here on the forum.

FanJ · Jul 23, 2013

Several Dutch sites have postings about this:
Following 3 links in Dutch:

http://tweakers.net/nieuws/90369/hackers-stelen-europees-klantenbestand-bij-hoster-ovh.html

http://webwereld.nl/beveiliging/78614-hacker-steelt-europees-klantenbestand-grootste-franse-hoster

http://www.nu.nl/tech/3533136/zeer-grote-webhost-ovh-gehackt.html

===

The UK site of OVH is telling about OVH itself:
http://www.ovh.co.uk/aboutus/

Founded in 1999 by Octave Klaba, OVH is an independent European company based in Roubaix, Northern France. It is the number one host in Europe and is the fourth largest for domain names in the world (source Netcraft January 2012).
Click to expand...

===

Why did I speak about France and Canada in the original post:

1.
OVH is based in France.

2.
The reason for speaking about Canada:
It has been posted by OVH at http://status.ovh.net/?do=details&id=5070

As for the server delivery system in Canada, the risk we have identified is that if the client had not withdrawn our SSH key from the server, the hacker could connect from your system and retrieve the password stored in the .p file. The SSH key is not usable from another server, only from our backoffice in Canada . Therefore, where the client has not removed our SSH key and has not changed their root password, we immediately changed the password of the servers in the BHS DC to eliminate an risk there. An email will be sent today with the new password. The SSH key will be systematically deleted at the end of the server delivery process in both Canada and Europe. If the client needs OVH for support, a new SSH key will need to be reinstalled.
Click to expand...

Read more at that link.

Log in or Sign up

OVH hosting servers hacked

FanJ Updates Team

FanJ Updates Team

Log in or Sign up

OVH hosting servers hacked

FanJ Updates Team

FanJ Updates Team

Useful Searches