⚠️ Cloudcone hit by ransomware via Virtualizor exploit

Cloudcone is reporting a security breach where attackers used the Virtualizor "Server Terminal" to bypass SSH alerts and run a ransom script on a subset of nodes.

What happened: Affected VMs had their boot sectors overwritten with ransom messages.

Scope: Limited to nodes on a single Virtualizor instance. Other platforms and billing/personal data were not impacted.

Recovery: The team is currently attempting data recovery via raw block devices and partition reconstruction.

Affected users should keep an eye on their email for further updates from Cloudcone.

————————————————————

⚠️ Cloudcone 通过 Virtualizor 漏洞遭遇勒索软件攻击

Cloudcone 正在报告一起安全漏洞事件，攻击者利用 Virtualizor 的“服务器终端”绕过 SSH 警报，并在部分节点上运行了勒索脚本。

事件经过：受影响的虚拟机（VM）其引导扇区被覆盖为勒索信息。

影响范围：仅限于单个 Virtualizor 实例上的节点。其他平台以及计费/个人数据未受到影响。

恢复情况：团队目前正在通过原始块设备和分区重建来尝试数据恢复。

受影响的用户应留意来自 Cloudcone 的后续邮件更新。

来源：https://t.me/lowendweb/5398

📦 SpartanHost(CMIN2 Premium KVM VPS - Seattle) - [4096MB SEAKVM AS9929-CMIN2]

💰 Starting from $24.00 USD

📜 4 CPU vCores (4.5GHz AMD Ryzen 7950X), 4096MB DDR4 ECC RAM, 100GB Raid NVMe SSD Storage, 1 IPv4, /64 IPv6, 2TB bandwidth @ 200Mb/s CMIN2 out and 10Gb/s in (speed limited to 1Mb/s after allocation used)

🏷️ KVM20

ℹ️ 20Gb/s TCP DDoS Protection

🔗 https://billing.spartanhost.net/aff.php?aff=1190&pid=426

🛒 0

📦 ZgoCloud - Los Angeles AMD VPS - Specials - Starter

💰 $36.0 USD/Annually

📜 1 Core AMD EPYC 7B13, 2 GB DDR4 RAM, 30G NVMe SSD, 1 IPV4 & /64 IPV6, 1T/Month/300Mbps, Los Angeles, China Premium Optimised

ℹ️ #优化线路 #9929&CMIN2 #风评一般

🔗 https://clients.zgovps.com/?cmd=cart&action=add&affid=288&id=66

🛒 0

📦 ZgoCloud - Los Angeles Global VPS - Specials - Starter

💰 $15.00 USD/Annually

📜 1 Core AMD EPYC 7002 Series, 1 GB DDR4 RAM, 20G NVMe SSD, 1 IPV4 & /64 IPV6, 2T/Month/1000Mbps, Los Angeles

ℹ️ #国际网络 #风评一般

🔗 https://clients.zgovps.com/?cmd=cart&action=add&affid=288&id=93

🛒 0

📦 SpartanHost(Seattle - Rapid Deploy Dedicated Servers (China Optimised)) - [Intel Xeon E3-1270 v3]

💰 Starting from $69.99 USD

📜 Intel Xeon E3-1270 v3, 32GB DDR3 ECC RAM, 1TB SSD, 1 IPv4 and /64 IPv6, 20TB@1Gb/s, 20Gb/s TCP DDoS Protection

🏷️ 10offdedi

🔗 https://billing.spartanhost.net/aff.php?aff=1190&pid=330

🛒 0

📦 ZgoCloud - Los Angeles Intel Performance VPS -Specials - Lite

💰 $30.00 USD/Annually

📜 1 Core Intel® Xeon® Platinum 8452Y, 768Mb DDR5 ECC RAM, 15G NVMe SSD, 1 IPV4, 600G/Month/200Mbps, Based on the Principle of Fair Use, Los Angeles, China Optimised

ℹ️ #高性价比 #优化线路 #风评一般

🔗 https://clients.zgovps.com/?cmd=cart&action=add&affid=288&id=39

🛒 0

📦 SpartanHost(CMIN2 Premium KVM VPS - Seattle) - [4096MB SEAKVM AS9929-CMIN2]

💰 Starting from $24.00 USD

📜 4 CPU vCores (4.5GHz AMD Ryzen 7950X), 4096MB DDR4 ECC RAM, 100GB Raid NVMe SSD Storage, 1 IPv4, /64 IPv6, 2TB bandwidth @ 200Mb/s CMIN2 out and 10Gb/s in (speed limited to 1Mb/s after allocation used)

🏷️ KVM20

ℹ️ 20Gb/s TCP DDoS Protection

🔗 https://billing.spartanhost.net/aff.php?aff=1190&pid=426

🛒 0

📦 SpartanHost(DDoS Protected SSD E5 KVM VPS - Dallas) - [1024MB DALBKVM]

💰 Starting from $5.00 USD

📜 2 CPU vCores (2.6 GHz E5-2690v4), 1024MB DDR4 ECC RAM, 15GB Raid NVMe SSD Storage, 1 IPv4, /48 routed IPv6, 2TB bandwidth @ shared 10Gb/s (speed limited to 5Mb/s after allocation used), 12Tb/s Path.net DDoS Protection

🏷️ KVM20

🔗 https://billing.spartanhost.net/aff.php?aff=1190&pid=349

🛒 2 #Available

📦 SpartanHost(DDoS Protected SSD E5 KVM VPS - Dallas) - [2048MB DALBKVM]

💰 Starting from $10.00 USD

📜 2 CPU vCores (2.6 GHz E5-2690v4), 2048MB DDR4 ECC RAM, 30GB Raid NVMe SSD Storage, 1 IPv4, /48 routed IPv6, 3TB bandwidth @ shared 10Gb/s (speed limited to 5Mb/s after allocation used), 12Tb/s Path.net DDoS Protection

🏷️ KVM20

🔗 https://billing.spartanhost.net/aff.php?aff=1190&pid=350

🛒 4 #Available

⚠️ HostSlick reportedly targeted in Virtualizor-linked attacks

Reports on LowEndTalk indicate that HostSlick is the latest provider impacted by the ongoing security incidents targeting Virtualizor-based infrastructure. Ransom messages appearing in HostSlick VNC consoles utilize the same Telegram contact handle seen in the Cloudcone breach.

HostSlick joins Cloudcone, OuiHeberg, and ColoCrossing as providers recently affected while utilizing the Virtualizor. This further supports claims of a direct vulnerability within the software.


The following providers are also utilize Virtualizor for their VPS offerings:

- Virtono
- SolidSEOVPS
- Naranjatech
- LittleCreek
- DediRock
- Chunkserv
- RareCloud

If you have active services with these or any other Virtualizor-managed providers, ensure you have a current backup stored outside of their infrastructure.


⚠️ 据报道，HostSlick 成为 Virtualizor 相关攻击的目标

LowEndTalk 上的报告显示，HostSlick 是最新一家受到持续安全事件影响的供应商，这些事件针对的是基于 Virtualizor 的基础设施。出现在 HostSlick VNC 控制台中的勒索信息使用了与 Cloudcone 数据泄露事件中相同的 Telegram 联系人账号。

HostSlick 与 Cloudcone、OuiHeberg 和 ColoCrossing 一样，都是近期在使用 Virtualizor 时受到影响的供应商。这进一步证实了该软件存在直接漏洞的说法。

以下供应商也使用 Virtualizor 为其 VPS 服务提供支持：

- Virtono

- SolidSEOVPS

- Naranjatech

- LittleCreek

- DediRock

- Chunkserv

- RareCloud

如果您在这些或其他任何使用 Virtualizor 管理的供应商处拥有有效服务，请确保您已将最新备份存储在其基础设施之外。

来源：https://t.me/lowendweb/5403

📦 SpartanHost(Seattle - Rapid Deploy Dedicated Servers (China Optimised)) - [Dual Intel Xeon E5-2699 v3 - 256GB]

💰 Starting from $240.00 USD

📜 Dual Intel Xeon E5-2699 v3, 256GB DDR4 ECC RAM, 960GB SSD, 1 IPv4 and /64 IPv6, 20TB China Optimised Bandwidth (in+out)@1Gb/s Port, CMIN2 upgrade available in the "Bandwidth" dropdown, 20Gb/s TCP DDoS Protection, 200Gb/s upgrade available

🏷️ 10offdedi

🔗 https://billing.spartanhost.net/aff.php?aff=1190&pid=445

🛒 0