17/01/2019

Hackers have deleted more than 6,500 sites being held on a dark web server called "Daniel's Hosting"

The site was sitting on the hidden Tor network and many people used it to host pages they did not want to publish on the wider web. Administrator Daniel Winzen said no back-ups were kept of the pages it hosted. He said the site should be back in service in December. "Around 6,500 hidden services were hosted on the server, there is no way to recover from this breach, all data is gone" wrote Mr Winzen in a message put on the welcome page of the web companion to the site. "Daniel's Hosting became one of the most popular sites for, a.onion site owners, after the previously biggest host went offline in early 2017. Daniel's hosted a very wide variety of material including fan fiction, political tracts, philosophy books, porn, hacked files, videos, web marketplaces, crypto-cash forums and places where whistleblowers could leave documents. Mr Winzen told the BBC that he was still trying to work out how hackers had accessed the site on 15 November, when all the data was deleted. "As of now, I haven't found the vulnerability," he said.

The prime candidate is a newly discovered vulnerability in PHP, a computer scripting language used for website development, that was being circulated in some hacker circles shortly before Danwin was attacked. However, Mr Winzen told ZDNet that he was not sure that this was the route the hackers took to gain access. When the site returns, he said he would take the chance to change "some bad design choices of the past" and improve how it runs. It is also not clear who broke into Daniel's Hosting or why the data was deleted. The Anonymous hacking collective has been behind takedowns of other dark web hosts but, so far, there is no sign of that group's involvement in this attack.

https://www.cybersecurityintelligence.com/blog/blackout-on-the-dark-web-4035.html

No comments :

Post a Comment