Almost one year ago to this day Code Spaces, a cloud storage company, was effectively laid to rest. A simple breach of a single server panel left them open to destruction.
Code Spaces made use of Amazon Web Services' server instances and storage as its platform. This made them more vulnerable than they realized - the attackers gained access to the company's AWS control panel and demanded money in exchange for safe return of the company's data which was being held hostage.
The attackers were alert to Code Spaces' attempts to regain control of their AWS control panel without paying the ransom, this prompted mass deletion of Code Spaces' resources. The company was forced to admit defeat with a somber message to concerned parties:
"We finally managed to get our panel access back but not before he had
removed all EBS snapshots, S3 buckets, all AMIs, some EBS instances, and
several machine instances."
Code Spaces had replicated services and backups, but those were all apparently controllable from the same panel and, thus, were summarily destroyed.
The overriding message to be gleamed from this story is that those who feel compelled to make use of cloud storage facilities should invest in serious off-site, offline backup utilities.
 RIP &via=stc_network)
0 comments:
Post a Comment