DreamHost has confirmed attackers were inside its web-based File Manager from August until October 23, grabbing FTP/SFTP logins and some webmail session tokens. That's roughly two months of access before anyone noticed. Stolen session tokens are nasty because they skip right past your password. If you or a client host with DreamHost, reset FTP, SFTP and email passwords, check your sites for files you didn't put there, and turn on MFA anywhere it's offered. Even with a managed host, keep your own backups and watch your own logs.
Cybersecurity #DataBreach #WebHosting #ITSupport #SmallBusiness
Source: TechCrunch
Originally published at trevorheshka.com
Top comments (0)