Hackers steal customer data from Russian hosting provider FirstVDS

FirstVDS disclosed a breach discovered Saturday in which attackers exploited a vulnerability in ISPsystem's VMmanager 6 to copy passwords, cloud credentials, configuration files and crypto wallets from customer virtual servers. Disks were mounted read-only, leaving no traces on the VMs. The company did not say how many customers were affected.

• Attack exploited a flaw in ISPsystem's VMmanager 6
• Stolen data includes passwords, cloud keys, configs and crypto wallets
• Disks mounted read-only left no traces on virtual servers
• Patches released, but the vulnerability is not fully fixed