Dreamhost one of the popular hosting website has fallen prey to hackers.They have issued a mass Password reset notice to protect the users.According to a post published on Dreamhost official blog, it was detected that security breach occurred in November 2011 through their one click Install wizard.
Here is the official Statement from their blog
Apparently, the breach occurred in November via the one-click install wizard offered by Dreamhost: One click and your whole WordPress / Drupal web site is installed, ready to use, automatically updated by the wizard. Apparently, it’s the wizard itself that was compromised and anybody who used it was affected.Dreamhost CEO has advised to change the Email ID password also to ensure complete safety.If you have hosted your WordPress/Drupal website then it’s the time to change your passwords.
Hackers were able to find a way into unencrypted FTP/Shell passwords.The company has issued a statement that all unencrypted passwords have been deleted and they are taking additional steps to further enhance the security.
No comments:
Post a Comment