Russian web-hosting and cloud provider Beget is rebuilding its cloud infrastructure after attackers accessed its management systems and ran data-wiping scripts that erased data across the provider’s cloud environment. The company said the attack occurred overnight on November 1-2 and disrupted services across its architecture.
Beget’s November 7 recovery update said 60% of its shared-hosting servers were running again and 40% of dedicated servers under its administration had been restored. Dedicated servers without Beget administration were already back online. The company said each server must be checked manually, with more than 1,000 requiring inspection for vulnerabilities and malicious scripts before they can be restored.
The provider said data in its cloud infrastructure, including VPS, S3 storage and Kubernetes, was lost, along with CDN settings and IP configurations. It said VPS binary backups were completely lost, while file-level backups survived. In a November 6 update, Beget estimated that file backups would be available to only about half of VPS users, and said matching surviving backups to individual accounts remained a complex task.
BleepingComputer reported on November 9 that recovery was still in progress and that Beget had found no evidence the attacker tried to download or modify any data on the compromised servers. The company has not provided a date for full restoration of its cloud services.
If this article helped you, please consider supporting our work. Every small contribution keeps Abijita.com independent and running.
