V2EX = way to explore
V2EX 是一个关于分享和探索的地方
现在注册
已注册用户请  登录
通过以下 Referral 链接购买 DigitalOcean 主机,你将可以帮助 V2EX 持续发展
DigitalOcean - SSD Cloud Servers
tickwongcn
V2EX  ›  VPS

谨防坑爹的 ColoCrossing 的主机/VPS

  •  1
     
  •   tickwongcn · 12 天前 · 1186 次点击

    本人今天收到一封来自官方的邮件: Dear representatives of ColoCrossing administration and users of hosting services,

    We hereby inform you of documented facts that testify to gross violations in the operation of your infrastructure:

    1. Illegal content and lack of moderation
    • Numerous instances of:
    • Deepfake content using images of public figures and private citizens
    • Content that violates legislation on the protection of minors
    • Extremist and violent content.
    1. Critical security vulnerabilities
    • Multiple attack vectors have been identified that allow:
    • Gain unauthorized root access to client servers
    • Bypass authentication and authorization systems
    1. Misuse of infrastructure for illegal purposes
    • There are cases of exploitation of your resources for:
    • Organizing botnets and distributing malware
    • Providing anonymization of illegal activities via Tor-nodes, as well as XRay/WireGuard/X-UI/OpenVPN protocols.

    Requirements for the administration of ColoCrossing, as well as users who have stored such content:

    • Contact us
    • Pay us for our silence so that we don't hand over logs/emails/ip addresses and other information proving violations.
    • Resolve problems with similar content, we can help with this for an additional fee.

    User Recommendations: Until confirmation that the above violations have been remedied, we strongly recommend that you refrain from:

    • Storing sensitive data on the platform
    • Conducting financial transactions through ColoCrossing as well as HostPapa Inc. services.
    • Using hosting services for mission-critical projects

    To confirm remediation of breaches and for more information: Telegram: https://t.me/ransombotbot Telegram: https://t.me/ransombotbot Telegram: https://t.me/ransombotbot

    Please note that in the absence of an adequate response within the established timeframe, a full whistleblowing procedure will be initiated to inform all stakeholders of the identified violations, including:

    • Regulators of relevant jurisdictions
    • Media
    • Professional community

    大概意思我翻译一下,就是它貌似检测到我了我安装的 caddy ,当然各位懂的,我确实拿来做自用的 XX 转发了,纯自用;然后就是说好像似乎有其他的第三方举报 XXX 之类的~说让我联系官方(不限于给封口费/向某机构举报我啥的),无非就是想敲诈一笔所谓的封口费。想啥呢~colocrossing...卖 18 刀的服务还想敲诈我封口费?

    19 条回复    2025-05-25 10:42:00 +08:00
    BeautifulSoap
        1
    BeautifulSoap  
       12 天前 via Android
    我咋感觉像是钓鱼邮件
    tickwongcn
        2
    tickwongcn  
    OP
       12 天前
    @BeautifulSoap
    发件人: Formal notification of system breaches in ColoCrossing infrastructure - demanding immediate action <[email protected]>
    回复: [email protected]
    收件人:XXXXX
    日期: 2025 年 5 月 24 日 23:10
    主题: Formal notification of system breaches in ColoCrossing infrastructure - demanding immediate action
    邮送域: em4475.colocrossing.com
    署域: colocrossing.com
    安全性: 标准加密 (TLS) 了解详情
    : 这是一封重要邮件,主要因为它是直接发送给您的。
    ---------------
    不像~看着就是官方的地址发过来的。
    tickwongcn
        3
    tickwongcn  
    OP
       12 天前
    这等行径太恶劣了~无良商家,各位还是避雷吧···
    sleepm
        4
    sleepm  
       12 天前
    ransombotbot
    感觉有点问题,还是提高警惕
    l12ab
        5
    l12ab  
       12 天前
    很多人都收到了
    tickwongcn
        6
    tickwongcn  
    OP
       12 天前
    @sleepm 所以我也没回邮件,反正也不鸟它
    tickwongcn
        7
    tickwongcn  
    OP
       12 天前
    @l12ab 就很扯·
    oftx
        8
    oftx  
       12 天前
    我收到了一封和你一模一样的邮件,不知道这官方要搞什么
    tickwongcn
        9
    tickwongcn  
    OP
       12 天前
    看了一下隔壁貌似是黑客钓鱼··感觉可以忽略了。
    xnxnyz
        10
    xnxnyz  
       12 天前
    我也收到了。虽然是用的官方邮箱,但会不会是被盗用或者伪造的,正经公司叫用户到 Telegram 去是什么意思。官方的 X 还有网站也还不吱个声。
    tickwongcn
        11
    tickwongcn  
    OP
       12 天前
    上面的 TG 链接各位不要乱点击!!!
    上面的 TG 链接各位不要乱点击!!!
    上面的 TG 链接各位不要乱点击!!!
    mayli
        12
    mayli  
       12 天前 via Android
    明显钓鱼
    tickwongcn
        13
    tickwongcn  
    OP
       12 天前
    @mayli 嗯,那就放心了~可以尽情用了··哈哈哈
    est
        14
    est  
       12 天前
    值得担心的是邮箱怎么泄漏的。。。
    tickwongcn
        15
    tickwongcn  
    OP
       12 天前
    @est 安全性太差了···
    BeautifulSoap
        16
    BeautifulSoap  
       12 天前
    @tickwongcn 看了下 mjj 等地方,大概率是网站被黑了
    tickwongcn
        17
    tickwongcn  
    OP
       12 天前
    @BeautifulSoap 对的~
    kome
        19
    kome  
       12 天前 via iPhone
    看到的消息: https://t.me/zaihuanews/33035
    节选部分:
    ColoCrossing 及其关联服务商( HudsonValleyHost 、ChicagoVPS )共享的 Virtualizor 虚拟化管理面板遭到数据泄露,该面板的数据库被黑客攻破,所有用户密码以明文形式存储并全部泄露。
    此次泄露仅涉及共享的 Virtualizor 面板,ColoCrossing 自有的用户管理面板和独立服务器系统目前未受影响。
    关于   ·   帮助文档   ·   博客   ·   API   ·   FAQ   ·   实用小工具   ·   4734 人在线   最高记录 6679   ·     Select Language
    创意工作者们的社区
    World is powered by solitude
    VERSION: 3.9.8.5 · 22ms · UTC 05:37 · PVG 13:37 · LAX 22:37 · JFK 01:37
    Developed with CodeLauncher
    ♥ Do have faith in what you're doing.