Hackers have breached the severs of email provider VFEmail.net and wiped the data from all its US servers, destroying all US customers’ data in the process. The attack took place yesterday, February 11, and was detected after the company’s site and webmail client went down without notice.
Commenting on the news is Chris Doman, security researcher at AlienVault, an AT&T company:
“VFEEmail offers an anonymous email service that is popular with some of the more shady parts of the internet. This in itself, provides some interesting motivations for why someone might want to wipe all of their data.
Based on the command executed by the attackers, and shared on Twitter by VFEEmail, the attackers used the dd to wipe the systems. It may be possible to restore the files, but it will be harder than if the attackers had simply deleted individual files.
VFEEmail mention the backups were destroyed too. This shows the importance of off-site back-ups that can’t be easily accessed.”