FirstVDS customers' data stolen in server management software vulnerability

Hackers stole sensitive data belonging to customers of Russian hosting provider FirstVDS after exploiting a vulnerability in server management software, according to a recent report by The Record.

The attack, discovered on Saturday, exploited a flaw in ISPsystem's VMmanager 6 software, which FirstVDS uses to manage its servers. Attackers deployed malware that copied data from customers' virtual servers, including passwords, cloud service credentials, cryptocurrency wallets, and other files. The compromised data was then transferred to a server controlled by the attackers. FirstVDS stated that the breach affected only a portion of its infrastructure and did not disrupt customer operations, as the malware mounted disks in read-only mode. The company has disabled external access to the vulnerable system and blocked communications with the attackers' server. ISPsystem released several patches, but the vulnerability is not yet fully fixed. Customers who received breach notifications are advised to change their passwords and access credentials.