Hackers Target Anti-DDoS Firm Staminus
Summary: Staminus Communications, a California hosting provider that specializes in DDoS protection, had its entire network down for more than 20 hours starting around 5am PST, and during the outage someone posted download links for what appear to be its customer credentials, support tickets and credit card numbers. The e-zine, titled "Fuck 'em all," claims the attackers seized control of most or all of Staminus's Internet routers and reset them to factory settings, and accuses the company of using one root password for all boxes and storing credit card data in plain text.
Why it matters: A firm whose product is staying online under attack was itself offline for over 20 hours, and its customers' card data was reportedly sitting in plain text - the exact failure the attackers published alongside the stolen data.
Read the original at Krebs on Security ↗
- Topics
- Endpoint & Network Security
- Related
- Adapting to AI penetration testing orchestrators: The Modern Security Model Cyber Risks · Nov 13, 2026Introducing Spend Management: Spending limits and alerts for Cloudflare Cyber Risks · Nov 13, 2026Choosing Que Paxa, an unusual consensus algorithm Cyber Risks · Nov 11, 2026