Reeling from ransomware attack, Managed.com takes down its entire web hosting infrastructure

guest · Nov 20, 2020

Reeling from ransomware attack, Managed.com takes down its entire web hosting infrastructure
Client websites are offline out of “an abundance of caution” as $500,000 ransom demanded
November 18, 2020
https://grahamcluley.com/ransomware-attack-managed-com-web-hosting-infrastructure/

In the early hours of Monday morning, Managed.com – a major provider of managed web hosting solutions – discovered it was the victim of a co-ordinated ransomware attack, encrypting not only its own systems but also the websites of customers.

As you can probably imagine, customers – some of whom seem not to be aware that their web hosting provider has suffered a severe ransomware attack – are less than happy to find their websites are no longer online.
Although it’s unclear how many days or weeks it may take them to recover their customers’ websites – time that no online business can afford to be without an online presence.
Click to expand...

According to Bleeping Computer, the REvil ransomware gang is currently demanding US $500,000 from Managed.com for a decryption tool.
Click to expand...

Bleeping Computer: REvil ransomware hits Managed.com hosting provider, 500K ransom

At the time of this writing, websites for Managed.com hosting clients continue to be unavailable, leading to some clients switching their web hosting to another provider.

According to a screenshot shared with BleepingComputer, REvil is demanding a $500,000 ransom in Monero to receive a decryptor. It is not known if the ransomware operation stole unencrypted files before encrypting devices.
Click to expand...

REvil has been responsible for large attacks in the past, including Travelex, Kenneth Cole, SeaChange, Brown-Forman, and celebrity law firm Grubman Shire Meiselas & Sacks (GSMLaw).
BleepingComputer has contacted Managed.com with questions related to the attack but has not heard back.
Click to expand...

guest · Nov 20, 2020

mood said: ↑

Reeling from ransomware attack, Managed.com takes down its entire web hosting infrastructure November 18, 2020
Click to expand...

Ransomware attack shuts Jackson County website
November 19, 2020
https://mailtribune.com/news/top-stories/ransomware-attack-shuts-jackson-county-website

Jackson County’s website is down following a ransomware attack on the company providing web hosting services for the county.

An attack on Jackson County’s website hosting provider Managed.com appears to have taken place Monday. The company, one of the largest providers of managed web hosting, took down all its servers in order to deal with the ransomware attack, the technology news site zdnet.com reported.
The website outage comes at a critical time with Jackson County taking the lead on recovery efforts from September wildfires and dealing with a fall surge in COVID-19 cases.

“The Managed.com outage is still affecting our main public website. Internal county systems and data are not affected. Key online services remain available at jacksoncounty.org. No ETA yet to restore full public website. Thanks for your patience,” the county tweeted Tuesday night.
Jackson County also tweeted that its web host has warned this may be an extended outage.
Click to expand...

guest · Nov 20, 2020

Attack on vendor affects website of Arizona court system
November 20, 2020
https://globegazette.com/news/natio...cle_c8499baf-13f0-5e20-a873-f83f2d7b4861.html

A internet interruption resulting from a ransomware attack on a hosting provider has limited functionality of the Arizona state court system's webpage for most of this week, according to the vendor and court officials.

The court system acknowledged the continuing problem in a brief notice on the judicial branch's azcourts.gov homepage, which on Friday did not display the normal full array of content.
The vendor, Managed.com, said it had an “unscheduled service interruption" that began Monday and continued into Friday.
Click to expand...

The company said it was working to restore normal service but did not say when that would occur.
Aaron Nash, the court system's spokesman, told the Arizona Republic that the impact appears to be limited to information connected with the azcourts.gov website and does not affect individual court or clerk’s offices.
Click to expand...

guest · Nov 21, 2020

Local governments forced offline after ransomware targets web host
November 20, 2020
https://statescoop.com/local-governments-forced-offline-after-ransomware-targets-web-host/

Several state and local government agencies around the United States have had their web presences taken out following a ransomware attack against a web hosting provider the agencies share.

The provider, Managed.com, was targeted with the REvil malware in an incident that appears to have started Monday. The company has said it took down the entirety of its web hosting services, according to ZDNet, [...] But in Managed.com deactivating its hosting infrastructure, several of its clients’ websites have gone dark in the process.
Click to expand...

Among the affected customers are the governments of Brown County, Indiana; Columbus County, North Carolina; and Jackson County, Oregon. Additionally, the Arizona Judicial Branch said Thursday that its main website, azcourts.gov, was also affected.

Managed.com has said that only a handful of its clients’ websites were affected by the ransomware, but that it does not have an estimate of when its services might be restored.

“Our Technology and Information Security teams are working diligently to eliminate the threat and restore our customers to full capacity,” read a statement on its website.
The REvil malware appears to be targeting only Managed.com, and not any of the governments affected by the company’s deactivation of its hosting services.
Click to expand...

guest · Nov 21, 2020

Archdiocese of St. Louis websites down after ransomware attack
November 20, 2020
https://www.stltoday.com/lifestyles...cle_17e809f6-fd80-5260-8e7a-bb44f431d965.html

The Archdiocese of St. Louis websites are down after a "coordinated ransomware campaign," according to a statement from the Archdiocese.

The Archdiocese was made aware of the attack on Nov. 16. Several websites, including ArchSTL.org, StLouisReview.org and Cemeteries.ArchSTL.org were not working properly. Upon further review, the websites' hosting company took down the entire system to ensure it is not compromised.
No archdiocesan entities or information were compromised in the campaign, according to the statement.
Click to expand...

guest · Nov 21, 2020

Managed.com Status Page
https://status.managed.com/

Unscheduled Service Interruption – November 21st, 2020
[...] On Nov.16, the Managed.com environment was attacked by a coordinated ransomware campaign. To ensure the integrity of our customers’ data, the limited number of impacted sites were immediately taken offline. Upon further investigation and out of an abundance of caution, we took down our entire system to ensure further customer sites were not compromised.

Update – Our technology and security teams have been working around the clock to restore hosted services. We are unable to provide an ETA on restoration of specific customer services, however customers should receive an update once their services are available.
Click to expand...

zapjb · Nov 21, 2020

I blame Managed.com for letting this happen. As I do all multi-million dollar & up entities.

guest · Nov 21, 2020

Derby’s Griffin Hospital website taken down in major ransomware incident
Griffin Hospital is the indirect victim of a ransomware attack
November 20, 2020
https://www.msn.com/en-us/news/us/d...down-in-major-ransomware-incident/ar-BB1baCZD

The attack is being directed against Managed.com, which administers the Derby hospital’s website. In ransomware attacks, hackers encrypt data and demand payment in an untraceable cryptocurrency as a condition to restoring access.

In entering the URL for Griffin Hospital or Managed.com, web browsers returned error messages. Griffin Health has cobbled together an alternative website at griffinhealthct.org while it deals with the issue [...]
As of Thursday morning, the Griffin Hospital placeholder website did not furnish any information on the incident, but includes a password-enabled patient portal; a bill payment link; and information on how to schedule a test for the COVID-19 virus among other functions.
Click to expand...

Griffin spokesperson Christian Meagher said no personal health information has been compromised in the Managed.com hack.

“There was no exposure whatsoever,” Meagher said. “Those are secure on another (system). ... The website was mostly informational and links, so that was some of the situation — people will usually go through the website to get to their health records.”
Click to expand...

Log in or Sign up

Reeling from ransomware attack, Managed.com takes down its entire web hosting infrastructure

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

zapjb Registered Member

guest Guest

Log in or Sign up

Reeling from ransomware attack, Managed.com takes down its entire web hosting infrastructure

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

zapjb Registered Member

guest Guest

Useful Searches