Wednesday, March 26, 2014

Linux Malware Operation Windigo Infects 25,000 Web Servers

System administrators are being strongly urged to check their web servers for several pieces of Linux malware including rootkit known as Ebury SSH as part of an operation that has infected as many as 25,000 web servers in the past two years.

Ebury SSH is being used as a key part of a large and sophisticated operation called “Windigo” outlined in detail by ESET (PDF). Windigo also includes tools HTTP backdoor Linux/Cdorked to redirect web traffic, and Perl/Calfbot, a Perl script used to send spam.

Windigo has been around since at least 2011, and has compromised a wide range of operating systems including Apple OS X, OpenBSD, FreeBSD, Microsoft Windows (through Cygwin) and Linux (including Linux on the ARM architecture).

According to German government research agency CERT-Bund, Ebury is a Secure Shell rootkit/backdoor trojan for Linux and Unix-style operating systems.

CERT-Bund notes that Ebury provides a backdoor that attackers can use to get a remote root shell on infected hosts. Ebury steals SSH login credentials from incoming and outgoing SSH connections. Systems infected with Ebury are compromised at the root-level and are best dealt with by re-installing the operating system rather than trying to clean it up.

Some antivirus products are capable of detecting Ebury, usually as ‘SSHDoor’ or ‘Sshdkit’. However, ClamAV or tools like chkrootkit or rkhunter currently do not detect Ebury.

ESET notes that victims of Windigo may be Windows end-users visiting legitimate websites hosted on compromised servers, and Linux/Unix server operators whose servers were compromised. Windigo is also responsible for sending an average of 35 million spam messages per day, and more than 700 web servers are currently redirecting visitors to malicious content.

David Hamilton (14 Posts) Find me on Google+

David Hamilton is a Toronto-based technology journalist who has written for the National Post and other news outlets. He has covered the hosting industry internationally for the Web Host Industry Review with particular attention to innovative hosting solutions and the issues facing the industry. David is a graduate of Queen’s University and the Humber College School of Media Studies.


iPage Reviews: Get $10 Cashback Now

Tuesday, March 25, 2014

EMEA Server Revenues Reach $12.4B in 2013: IDC Report

EMEA server revenues reached $12.4 billion in 2013, with more than 2.2 million server units shipped last year, according to the latest EMEA Server Tracker from International Data Corporation, released on Tuesday.

According to the data, EMEA server revenues for 2013 showed an annual decline of 5.3 percent, though the decline in unit terms was less significant at 2.7 percent. Despite negative growth, IDC says that the market has improved compared to the stronger annual declines of 9.6 percent in revenues and 5 percent in units in 2012.

In the fourth quarter of 2013, factory revenue in the EMEA server market reached $3.7 billion, down 5.2 percent over Q4 2012. In Q4 2013, there were 606,548 units shipped, representing a slight annual decline of 0.3 percent.

Compared to Q3 2013, server volumes were up 13.2 percent and revenue up 28.5 percent in Q4 2014. According to IDC, the strong performance over the previous quarter can mainly be traced back to seasonality and a “sign of continuing price sensitivity at times of economic uncertainty and ongoing price competition, particularly at the lower end of the market.”

Despite EMEA being behind other regions in terms of infrastructure spend, EMEA spending on storage, server, and enterprise networking equipment will hit $3.47 billion in 2014, according to a separate report released last week by Gartner.

According to IDC, x86 servers totaled revenues of $2.8 billion in 2013, achieving year-on-year revenue growth of 3.7 percent despite a slight decline in unit terms by 0.3 percent.

“These figures underline the ongoing shift toward higher-end servers with upgrades to models that feature the latest-generation x86 processors,” Giorgio Nebuloni, research manager, Enterprise Server Group, IDC EMEA said. “Capacity increases are also achieved through advances on the virtualization and management software side, making scale out less viable for on-premises data centers in view of the high costs for energy, maintenance, and floor space rental. The trend is of course reversed in large B2C and B2B cloud facilities, which keep pushing the envelope on scale-out, commodity architectures.”

In terms of operating system, Windows held the majority of the market, accounting for 51.6 percent, and generating hardware spending of around $1.9 billion, down 0.6 percent year-over-year. Linux grew 9.3 percent year-over-year, generating sales of $832.8 million and accounting for 22.7 percent of the total market.

In Western Europe, the overall server market declined 3.5 percent in Q4 2013 compared with the same quarter in 2012. Revenues for x86 servers hit $2.1 billion, while non-x86 server revenue totaled $710 million.

“Large data center build-outs by global cloud service providers and social networks accounted for a significant chunk of growth in Western Europe that is most notable in the Nordic region and leads to a greater rise in shipments than revenues due to large deals of commodity servers at low prices from Asian ODMs as well as major server vendors,”Andreas Olah, research analyst, Enterprise Server Group, IDC EMEA said. “However, several countries that saw larger shipments to mega-data center customers in the previous year experienced a decline this quarter including the Netherlands, Ireland, and Belgium.”

According to IDC, in 2013 there was strong growth in Greece and Portugal, moderate rises in Germany, with declines in both the UK and Spain.

Central and Eastern Europe, the Middle East, and Africa server revenue decreased 10.3 percent year-over-year in Q3 2013 with $892.31 million, marking the sixth consecutive quarter of decline. The highlight for server sales in the region was Poland, crediting growth to investments in the government sector and demand from service providers.

Nicole Henderson (12 Posts) Find me on Google+

Nicole Henderson is the Editor in Chief of the Web Host Industry Review where she covers daily news and features online, as well as in print. She has a bachelor of journalism from Ryerson University in Toronto. You can find her on Twitter @NicoleHenderson.


iPage Reviews: Get $10 Cashback Now

Bitcoin Exchange Blames Data Center Provider for $100,000 Theft

datacenterknowledgelogo

Présentée par la connaissance de centre de données

Un échange de Bitcoin est de blâmer son fournisseur de colocation pour une violation de la sécurité qui a laissé au vol d'environ 100 000 $ en monnaie virtuelle.

Bitcoins canadienne basée à Ottawa, dit que le personnel du centre de données de Rogers n'a pas à vérifier l'identité d'un escroc à l'aide d'une conversation de web de soutien tech, lui permettant l'accès aux serveurs de l'entreprise. « Il est important de noter que cette violation s'est produite sans aucune authentification effectuée par le personnel du Centre de données de Rogers que ce soit », l'échange a déclaré dans un communiqué.

L'incident du 1er octobre 2013 a été décrit dans une histoire par The Ottawa Citizen, qui dit un utilisateur de chat en ligne prétend être James Grant, propriétaire de Bitcoins canadien. Voici un extrait :

"Selon une copie du texte de la session de chat, obtenue par le citoyen, à aucun moment au cours de la conversation de presque deux heures de longueur a été demandé par l'appelant vérifier son identité. Après avoir demandé, le travailleur de soutien technique accédé à stylo serveur verrouillé de Grant, branché à un ordinateur portable et puis manuellement a donné le fraudeur accès aux serveurs de Bitcoins canadienne, où il a nettoyé un portefeuille contenant des 149,94 bitcoins, environ 100 000 $. »

Rogers a déclaré au journal qu'il a offert un crédit de Bitcoins canadien, qui a supprimé à la place de son équipement depuis le centre de données de Rogers.

« Bitcoins canadien a demandé un compte rendu complet de Rogers au sujet de la violation de la sécurité à leur Centre de données d'Ottawa et a également déposé un rapport de police », a indiqué la compagnie.

"La situation entourant ce client est unique à ce client et ne s'applique pas à n'importe quel autre client des Centres de données de Rogers. "Rogers a été entièrement coopératif avec les autorités dans le cadre de l'enquête, Rogers a déclaré au journal.

Un courriel aux clients de Rogers, qui a été validée sur Reddit, a déclaré l'incident est survenu alors que l'installation a été exploitée par réseaux de granit, qui en cours d'acquisition par Rogers. « Il est à noter que cet incident a eu lieu au cours de la période d'acquisition avant que les Centres de données de Rogers avait le contrôle opérationnel complet de l'installation, » lire le courrier électronique. « Une fois que le Centre de données de Rogers avait pris le contrôle opérationnel complet de cet emplacement de granit, sa gamme complète de protocoles de sécurité a été mis en œuvre. »

Pour en savoir plus, consultez le Ottawa Citizen et CoinDesk.

Article original a été publié ici : http://www.datacenterknowledge.com/archives/2014/03/20/bitcoin-exchange-blames-data-center-provider-100000-theft/

Rich Miller Find me on Google+

Rich Miller est le fondateur et le rédacteur en chef de la connaissance de centre de données et a été l'établissement de rapports sur le secteur de centre de données depuis 2000. Il a suivi l'impact croissant de haute densité sur la puissance de calcul et de refroidissement des centres de données et la poussée qui en résulte pour améliorer l'efficacité énergétique dans ces installations.


iPage Reviews: Get $10 Cashback Now

Juniper Networks and VeriSign Partner for Hybrid DDoS Protection Solution

Juniper Networks and VeriSign have teamed up to offer a hybrid DDoS protection solution, the companies announced this week. The offering will be a hybrid in the sense that it protects against both high-volume DDoS attacks and targeted application-layer attacks, as well as in the more usual sense of being both on-premises and in the cloud.

Network and application-layer protection comes in the form of Juniper’s DDoS Secure, while VeriSign’s DDoS Protection Service defends from the cloud.

The solution monitors protected applications and adjusts its traffic identification and filtration based on application response and performance.

Mitigation response also adapts, with open source standards of communication between the different parts of the solution. The companies are also committed to automating integration between increasingly heterogeneous networks.

“In today’s network-dependent world, DDoS solutions must be able to detect and mitigate zero day threats and large-scale attacks to help businesses of all types and sizes stay secure, stable and available,” said Sean Leach, vice president of technology at VeriSign. “Our hybrid approach makes this possible by helping to ensure immediate mitigation on-premise with Juniper and in the cloud with Verisign, thereby quickly addressing attacks while also providing the extra bandwidth needed for mitigation as those attacks ramp up.”

A recent threat report from Black Lotus noted the growth of attacks over 100Gbps, highlighting the importance of the ability to scale mitigation efforts quickly. Also in January an Arbor Networks report noted application-level attacks on nearly every survey respondent over the past year.

Clearly organizations with diverse networks need diverse threat protection. The success of this new offering will partly hinge on whether it allows companies to avoid trade-offs in cost and performance as Juniper and VeriSign claim.

Chris Burt

Chris Burt is a WHIR contributor and writer of both fiction and non-fiction. His writing projects can be followed on Twitter @afakechrisburt.


iPage Reviews: Get $10 Cashback Now

Web hosting sales and Promos Roundup - March 21, 2014

In the week ending March 21, 2014, A small Orange celebrates March Madness with sales on dedicated servers, NetRepid a roommate agreement provides, PrestaShop provides modules of 15 percent and ITXDesign offers 20% off hosting.

A madness of small March Orange dedicated server sale

A small Orange offers up to 25% on the first Bill of its dedicated server managed hosting plans on the occasion of the month of March Madness. There are four discounts to choice:

HOOPS10 - 10% on the first invoice for 1 month plan

BASKET15 - 15% on the first invoice for a 3 month plan

BALL20 - 20% on the first invoice for a 6 month plan

WIN25 - 25% on a first bill for a 12 month plan

A small Orange, managed dedicated server hosting plans start at $175 per month and include the installation and server, as well as support 24/7/365 monitoring program.

NetRepid offers «Stay in PA» Colocation Deal

NetRepid seeks to capture a portion of the customers affected by colocation adoption BurstNet of Pennsylvania in North Carolina with her stay to deal PA. According to NetRepid, for interested parties who currently hosts with the PA-based data centres, it will waive all setup fee, offer a reduction of hours and provide for a reduction of 20 per cent of the monthly charge for the single, quarter, half and full rack colocation. To be eligible for this offer, interested parties must provide proof of colo current place of accommodation.

PrestaShop offers 15% on modules

To celebrate the release of the 1.6 of PrestaShop, PrestaShop offers 15% on all PrestaShop Modules developed for stores online, including modules for SEO and a reminder of the abandoned cart. To receive the discount, users must enter the PRESTASHOP16 coupon code at checkout.

ITXDesign offers 20% off hosting

ITXDesign offers 20% off hosting with a Twitter deal. Those who are interested in the discount are to enter the twitter code coupon at checkout. ITXDesign offers WordPress hosting, reseller hosting, dedicated servers and VPS.

Nicole Henderson (12 posts)Find me on Google+

Nicole Henderson is the editor-in-Chief of the Web Host Industry Review where she covers news every day and offers online, as well as in print. She holds a Bachelor's degree in journalism from Ryerson University in Toronto. You can find it on Twitter @NicoleHenderson.


iPage Reviews: Get $10 Cashback Now

Founder of FireHost is complementary skills in new CEO

It may be a coincidence that founding FireHost Chris Drake is deaf in one ear right and Jim Lewandowski is deaf in the left ear, but it is also a metaphor of their complementarity.

Drake recently announced that he would be renouncing his role as CEO for Lewandowski so that it could focus its efforts on the technology of the company as technical director of conduct.

Drake began as a member of the 82nd Airborne Division of the army American and, wounded, built some of the first display for military systems, before the internet was really the internet as we know it. "I'm an engineer at heart," says Drake. "When the opportunity presented itself to launch FireHost, I have therefore been very curved application..."I've been a developer. »

However, as the company began to grow, he began to find that the realities of managing a growing company have been diverted his attention from development. "As FireHost has continued to increase, I started to become other things, PAHO, and finance and human resources and sales and marketing and all the other functions that exist. '' I enjoyed their learning, but it wasn't my sweet spot. I've struggled with balancing my time between the development of the company... to do the things I like the most, what is product development and innovation. »

Construction of a scaffold for a growing business

In the course of the last year and a half, the Board of Directors of FireHost is built on a "scaffolding" in the form Executive recruits helping Drake discharge of responsibilities and spend more time on the development of products.

jimJim Lewandowski

Last year, Lewandowski joined the FireHost Council and has gotten more involved in the company before it became apparent that it would be a prime candidate to lead the company as CEO. "" He knew all the things really although I'm over weak in, "says Drake."

Lie powers Lewandowski in the field of management of technology companies, but it also has a strong technical background which allows it to communicate with the team. "Engineers have a way to solve problems creatively," says Drake. "It has little tech creative engineer learning mode which is in the same way that I work."

At the beginning of his career, Lewandowski has worked in the offshore oil industry, design capable of withstanding high pressure oil well heads. It turned out that the closing mechanisms, he developed high temperature and highly corrosive environments found in deep, offshore oil wells were considered as a solution to certain problems that have led to the disaster of the space shuttle Challenger 1986.

Later, Lewandowski joined IBM where he held a variety of management roles sales and more than ten years that have special competence to communicate in the language that engineers understand. He went to work at BMC Software, committed to Yahoo! by Jerry Yang, and have a role to McAfee and Rackspace.

After all these experiences, Lewandowski said he is very happy to be at FireHost, a company which he regarded as a leader in a field growing. "The market that we are - security and cloud - is a very large market, and I think it will become still more important over time." It notes that stories of hacking and other incidents of security in the news are helping people understand how security affects their lives.

"FireHost is a rather remarkable company," he said. «There is a high technology and perhaps even better technology is environment and philosophy Chris has built this company autour.»

Security taken to market

Now, with the post of CEO behind him, Drake has two main objectives: evangelizing the security and the creation of new products for its customers.

chrisChris Drake

"The gloves come this year from a messaging perspective," said Drake. He explains that FireHost security practices are what agencies should do and not only meet, but to be truly secure. "Our competition has been very focused on the checkbox in their way of thinking on compliance and security and not best practices oriented. So, I go to evangelize and educate the market. »

Drake will also concentrate on the understanding of what large companies see as their major challenges for the security and development of products to meet their needs. This goes hand in hand with the fact this FireHost visitors are increasingly large companies, rather than SMEs, causing revenue per customer to triple over the past two years. Instead of waiting for visitors to find FireHost, Drake to reach more potential customers.

This effort will be complemented by a R & D budget recently doubled over the next 12 months and the experience of Jim in go-to-market strategies.

Lewandowski said, "Chris and I complement each other, our skills complement each other very well. '' I like to think I'm good for the things that he is not as good, and it is much better technology and vision and those things that I am. »

David Hamilton (14 posts)Find me on Google+

David Hamilton is a Toronto-based technology journalist who has written for the National Post and other media. It covers the accommodation industry at the international level since the Web Host Industry Review with particular attention to innovative hosting solutions and industry issues. David is a graduate of the Queen the University and Humber College School of Media Studies.


iPage Reviews: Get $10 Cashback Now

Monday, March 24, 2014

To Fund School Broadband, FCC May Cut Funding for 'Outdated' Services Including Hosting

To shore up money for wireless broadband, a federal program aimed at providing money to connect schools and libraries to the Internet could stop paying for “outdated” services such as pagers, mobile phones, hosted email, web hosting and 800 numbers.

The “E-Rate” program is part of the $8.5 billion Universal Service Fund and is designed to provide affordable telecommunications and internet access to schools and libraries. According to a report from the New York Times, Federal Communications Commission chairman Tom Wheeler said a special task force will be looking into how E-Rate can be modernized to better meet the needs of the 21st Century.

Only half of the E-Rate funding goes towards high-speed (100mbps) Internet, and no funding goes towards Wi-Fi.

Recently, FCC Commissioner Jessica Rosenworcel set out her perspectives on modernizing the E-Rate program at SXSW.

“Spending smart means better accounting practices that the FCC has already identified will free up for more E-Rate broadband support over the next two years,” said Rosenworcel. “But spending smart goes beyond that. Because on a long-term basis we need to make sure that all E-Rate support is focused on high-speed broadband.”

She wants network speeds in schools to reach 100Mbps for every 1,000 students soon, and 1Gbps per 1,000 students at all schools by the end of the decade.

Wheeler says the FCC is looking into re-prioritizing wireless broadband services before it looks at tax increases as a way to increase the connectivity of schools and libraries.

While it seems appropriate to do away with funding pagers, mobile phones, and 800 numbers, it may be harder to transition away from email and web hosting, and likely require schools and libraries to pay for hosting fees out-of-pocket.

David Hamilton (14 Posts) Find me on Google+

David Hamilton is a Toronto-based technology journalist who has written for the National Post and other news outlets. He has covered the hosting industry internationally for the Web Host Industry Review with particular attention to innovative hosting solutions and the issues facing the industry. David is a graduate of Queen’s University and the Humber College School of Media Studies.


iPage Reviews: Get $10 Cashback Now