3 ms·
The article explains that the site had been compromised for 6 months, and during that time all the data being stored was being encrypted and then silently decry
by zerocrates 12y ago
The article explains that the site had been compromised for 6 months, and during that time all the data being stored was being encrypted and then silently decrypted.
So, restoring from a backup wouldn't get you much of anywhere, since the backed-up data would still be encrypted. Even assuming your backups are separate and uncompromised, you'd still have to go back to before the original compromise and lose 6 months worth of data.
- TrainedMonkey 12y agoHow can you not detect something like that for 6 months... A simple audit should have caught this early on.
- vince_refiti 12y agoYes. There was a time when people actually tested the backups.
- sarciszewski 12y agoDid they not make regular backups of their production environment? Surely one of them would have the encryption key in the source code.