Blog · Cybersecurity · DataBreach · WebHosting · · Trevor Heshka
DreamHost breach: attackers had two months inside File Manager
DreamHost has confirmed attackers were inside its web-based File Manager from August until October 23, grabbing FTP/SFTP logins and some webmail session tokens. That's roughly two months of access bef
Originally posted at linkedin.com
DreamHost has confirmed attackers were inside its web-based File Manager from August until October 23, grabbing FTP/SFTP logins and some webmail session tokens. That's roughly two months of access before anyone noticed. Stolen session tokens are nasty because they skip right past your password. If you or a client host with DreamHost, reset FTP, SFTP and email passwords, check your sites for files you didn't put there, and turn on MFA anywhere it's offered. Even with a managed host, keep your own backups and watch your own logs.
Cybersecurity #DataBreach #WebHosting #ITSupport #SmallBusinesstrevorheshka.com
Source: TechCrunch