Celestine 发表于 2025-5-24 23:10:41

ColoCrossing这是被黑了吗？

收到这样一封邮件，发件方是<a href="mailto:cloud@colocrossing.com">cloud@colocrossing.com</a><br />
<br />
Dear representatives of ColoCrossing administration and users of hosting services,<br />
<br />
We hereby inform you of documented facts that testify to gross violations in the operation of your infrastructure:<br />
<br />
1. Illegal content and lack of moderation<br />
- Numerous instances of:<br />
* Deepfake content using images of public figures and private citizens<br />
* Content that violates legislation on the protection of minors<br />
* Extremist and violent content.<br />
<br />
2. Critical security vulnerabilities<br />
- Multiple attack vectors have been identified that allow:<br />
* Gain unauthorized root access to client servers<br />
* Bypass authentication and authorization systems<br />
<br />
3. Misuse of infrastructure for illegal purposes<br />
- There are cases of exploitation of your resources for:<br />
* Organizing botnets and distributing malware<br />
* Providing anonymization of illegal activities via Tor-nodes, as well as XRay/WireGuard/X-UI/Open扶墙 protocols.<br />
<br />
Requirements for the administration of ColoCrossing, as well as users who have stored such content:<br />
- Contact us<br />
- Pay us for our silence so that we don't hand over logs/emails/ip addresses and other information proving violations.<br />
- Resolve problems with similar content, we can help with this for an additional fee.<br />
<br />
User Recommendations:<br />
Until confirmation that the above violations have been remedied, we strongly recommend that you refrain from:<br />
- Storing sensitive data on the platform<br />
- Conducting financial transactions through ColoCrossing as well as HostPapa Inc. services.<br />
- Using hosting services for mission-critical projects<br />
<br />
To confirm remediation of breaches and for more information:<br />
Telegram: https://t.me/ransombotbot<br />
Telegram: https://t.me/ransombotbot<br />
Telegram: https://t.me/ransombotbot<br />
<br />
Please note that in the absence of an adequate response within the established timeframe, a full whistleblowing procedure will be initiated to inform all stakeholders of the identified violations, including:<br />
- Regulators of relevant jurisdictions<br />
- Media<br />
- Professional community<br />
<br />
尊敬的ColoCrossing管理层代表及托管服务用户：<br />
<br />
我们正式向贵方通报已记录在案的严重违规事实：<br />
<br />
非法内容与审核缺失<br />
<br />
存在大量违规实例：<br />
<br />
滥用公众人物及普通公民肖像的深度伪造内容<br />
<br />
违反未成年人保**的相关内容<br />
<br />
极端主义及暴力内容<br />
<br />
重大安全漏洞<br />
<br />
已发现多重攻击向量可导致：<br />
<br />
非法获取客户服务器的root权限<br />
<br />
绕过系统认证与授权机制<br />
<br />
基础设施的非法滥用<br />
<br />
存在利用贵方资源进行：<br />
<br />
僵尸网络构建与恶意软件传播<br />
<br />
通过Tor节点及XRay/WireGuard/X-UI/Open扶墙协议为非法活动提供匿名化服务<br />
<br />
对ColoCrossing管理层及存储此类内容用户的要求：<br />
<br />
立即与我们取得联系<br />
<br />
支付封口费以换取我们保留日志/邮件/IP地址等违规证据<br />
<br />
限期整改同类违规内容（可提供有偿协助）<br />
<br />
用户注意事项：<br />
在未确认整改完成前，我们强烈建议：<br />
<br />
停止在平台存储敏感数据<br />
<br />
暂停通过ColoCrossing及HostPapa Inc.服务进行金融交易<br />
<br />
避免将关键业务部署于该托管服务<br />
<br />
整改确认及详情咨询：<br />
Telegram：https://t.me/ransombotbot<br />
Telegram：https://t.me/ransombotbot<br />
Telegram：https://t.me/ransombotbot<br />
<br />
郑重声明：若未在限定时间内获得有效回应，我们将启动完整吹哨程序，向以下各方通报违规事实：<br />
<br />
所属司法辖区监管机构<br />
<br />
新闻媒体<br />
<br />
行业专业组织<br />
<br />

<ignore_js_op>

<img src="https://hostloc.com/static/image/filetype/image.gif" border="0" class="vm" alt="" />
<span style="white-space: nowrap" id="attach_173934" onmouseover="showMenu({'ctrlid':this.id,'pos':'12'})">

<a href="https://hostloc.com/forum.php?mod=attachment&aid=MTczOTM0fDVkYzYxN2M1fDE3NDgyMTk5NTF8MHwxNDExNjIz" target="_blank">ccs.png</a>

<em class="xg1">(79.29 KB, 下载次数: 0)</em>
</span>
<div class="tip tip_4" id="attach_173934_menu" style="position: absolute; display: none" disautofocus="true">
<div class="tip_c xs0">
<div class="y"><span title="2025-5-24 23:08">前天&nbsp;23:08</span> 上传</div>
点击文件名下载附件

</div>
<div class="tip_horn"></div>
</div>

</ignore_js_op>

气味 发表于 2025-5-25 00:53:41

好歹也是一家老牌的IDC<br />
有自己的机房 <br />
怎么还这个水平

cicvc 发表于 2025-5-24 23:14:22

我也收到了<img src="https://hostloc.com/static/image/smiley/default/lol.gif" smilieid="12" border="0" alt="" /><img src="https://hostloc.com/static/image/smiley/default/lol.gif" smilieid="12" border="0" alt="" /><img src="https://hostloc.com/static/image/smiley/default/lol.gif" smilieid="12" border="0" alt="" />

whoiswho 发表于 2025-5-24 23:14:56

我也收到,我还以为只有我.

whoiswho 发表于 2025-5-24 23:16:02

我联系这个电报,我说他是黑客,他说是的.

笑花落半世琉璃 发表于 2025-5-24 23:17:00

大概率是的

CodyDoby 发表于 2025-5-24 23:19:30

这可如何是好，现在就去删鸡要求退款？

llb_2004 发表于 2025-5-24 23:19:40

我也收到了，还打算发ticket

whoiswho 发表于 2025-5-24 23:20:25

<div class="quote"><blockquote><font size="2"><a href="https://hostloc.com/forum.php?mod=redirect&goto=findpost&pid=16393164&ptid=1411623" target="_blank"><font color="#999999">llb_2004 发表于 2025-5-24 23:19</font></a></font><br />
我也收到了，还打算发ticket</blockquote></div><br />
发喂,看看是啥

llb_2004 发表于 2025-5-24 23:19:00

<div class="quote"><blockquote><font size="2"><a href="https://hostloc.com/forum.php?mod=redirect&goto=findpost&pid=16393167&ptid=1411623" target="_blank"><font color="#999999">whoiswho 发表于 2025-5-24 23:20</font></a></font><br />
发喂,看看是啥</blockquote></div><br />
就是楼主的邮件呀，我发了ticket了看下怎么回复
页: [1] 2 3 4
查看完整版本: ColoCrossing这是被黑了吗？