amuck-landowner

ChicagoVPS / CVPS Hacked. New SolusVM exploit? (Content Restored) [PT. 1/2]

Status
Not open for further replies.
drmike

drmike

100% Tier-1 Gogent
Umm link doesn't work on CVPS and the 4chan file has been pulled:

spacer.gifThis file is no longer available because of claim by  4shared Support Team.

 

 

 

 
 
drmike

drmike

100% Tier-1 Gogent
ChicagoVPS is a total crap heap.

This is the second hack since November.

Yeah, there is a full database dump floating around too it seems.

Did anyone see what was in that database passwords file?
 
Magiobiwan

Magiobiwan

Insert Witty Statement Here
Verified Provider
I didn't grab it myself, but I hear (from thread on LET) it's the same stuff as was in the RamNode one. Names, Emails, Client IDs, Hashed PW, Original Root PW, IPs, Hostnames, OS, Virt Type, etc. 
 
drmike

drmike

100% Tier-1 Gogent
Oh look, Kevin is indeed Adam Ng:

(12,'adamng','50f1ba0c5fe73f19bbf09cc728f2526e57910c23','[email protected]','Adam','Ng','Active',1,1354156121,'1','sysinfo:true,susvps:true,rlsinfo:true|clusterstats:true,userstats:true,clientact:true,updates:true,sysmess:true|','control:true,sett

ings:true|usage:true,info:true,note:true|','nodeinfo:true,nodebuttons:true,nodegraphs:true|','')
 
mpkossen

mpkossen

New Member
buffalooed said:
ChicagoVPS is a total crap heap.

This is the second hack since November.

Yeah, there is a full database dump floating around too it seems.

Did anyone see what was in that database passwords file?
Click to expand...
Could also be due to a SolusVM exploit.

Several people on LET confirm their information is in the file. I'm just assuming it's a dump of the customer table or maybe even a full dump.
 
drmike

drmike

100% Tier-1 Gogent
mpkossen said:
Could also be due to a SolusVM exploit.

Several people on LET confirm their information is in the file. I'm just assuming it's a dump of the customer table or maybe even a full dump.
Click to expand...
It's a full SolusVM dump.  Same sort of dump as the November #failing 
 
MannDude

MannDude

Just a dude
vpsBoard Founder
Moderator
So does this DB have all the same info as their last one did? If so, that's very worrying. If it's a full DB dump of SolusVM then I'd assume it has emails, passwords (hashed, can be easily unhashed), IP addresses, etc, etc.

Not good at all. Was this Robert Clarke too? Haha.
 
peterw

peterw

New Member
Post on LEB:

Lol:


Attention providers:
In roughly 12 hours I will be disclosing 3 zero day vulnerabilities on solusvm.
I suggest you take backups fast or else hackers will abuse this. I have tried contacting solusvm to fix it however I have been ignored.
They stated the vuln is “not important at this time”
Good luck.

June 17, 2013  2:36 pm
Click to expand...
 
MannDude

MannDude

Just a dude
vpsBoard Founder
Moderator
buffalooed said:
Oh look, Kevin is indeed Adam Ng:

(12,'adamng','50f1ba0c5fe73f19bbf09cc728f2526e57910c23','[email protected]','Adam','Ng','Active',1,1354156121,'1','sysinfo:true,susvps:true,rlsinfo:true|clusterstats:true,userstats:true,clientact:true,updates:true,sysmess:true|','control:true,sett

ings:true|usage:true,info:true,note:true|','nodeinfo:true,nodebuttons:true,nodegraphs:true|','')
Click to expand...
Ha, been saying it all along. No one cares. Adam Ng IS Kevin Hillstrand. No one would admit to anything. The kid just turned 18 a month or so ago.
 
drmike

drmike

100% Tier-1 Gogent
MannDude said:
Ha, been saying it all along. No one cares. Adam Ng IS Kevin Hillstrand. No one would admit to anything. The kid just turned 18 a month or so ago.
Click to expand...

Yeah Holestained is Adam Ng.      Yep, he was a minor while employed by CVPS and URpad.

Yes, Adam and Chris lied again about who Hillstrand was.

Did WHT ban Hillstrand yet?  They should.
 
Status
Not open for further replies.
Top
amuck-landowner