Criminals gained access to the service provider’s AWS panel. The attempt to regain control failed. On a blackmail attempt Code Spaces did not enter. As a result, the unknowns deleted all data and backups.
The code-hosting service Code Spaces has notified that it will cease operations. Previously, unknown attackers had deleted almost all customer data, including backups. For users, this means that they have lost their program code unless they have created a local copy. Before the deletion, the criminals tried to blackmail the provider.
Cyberattacken_mittelstandLast week, criminals launched a distributed denial-of-service (DDoS) attack on Code Spaces. This was apparently intended to distract from the attempt to gain access to the control console of the offer on Amazon Web Services’s Elastic Compute Cloud (AWS EC2). After this succeeded, the attackers demanded “a high fee”. For the contact an e-mail address was sent.
Code Spaces refused to give in to blackmail and tried to regain control. As a result, the criminals who set up backup accesses arbitrarily deleted customer data until almost none remained. “We ended up regaining our panel access, but not before deleting all EBS snapshots, S3 buckets, all AMIs, some EBS instances, and multiple machine instances,” a message says.
The programmer’s home page now also states: “Code Spaces will not be able to continue operations, as the cost of troubleshooting and expected compensation to customers for whom the service is no longer available puts Code Spaces in an irreversible position As far as both finances and general credit are concerned. “Business will therefore be stopped and focused on helping customers export any remaining data.
The company AbleBots from New Jersey, USA, offered Code Spaces. How much ransom the blackmailers demanded, the company said. Also, as the attackers obtained the AWS credentials, it did not comment. It merely informed that there was no reason to believe in a current or former employee as the perpetrator.
With a proven data protection plan that included data centers on three continents, Code Space had advertised. AbleBot will now process the offer, accept customers and support any data they may export. “All we can say right now is how sorry we are for this chain of events – for our clients as well as for Code Spaces employees.”