LocalBitcoins Attack against infrastructure 3.5.2014

[acegilz]

do anybody know how is this done exactly? If its not to hard to do, I would like to protect my files on the server too.. thanks

All data on the website server is encrypted. Manual actions are needed to make this data readable, so the attacker could not gain access to the data even when having a server console access.

So the Hacker/Attacker having 40min server access had plenty of time to DL data, he just can't read it?

Without decryption, the data should look like just bullshit.

i would love to know how could I make this on my server too..

[bcoins]

The dns appears of shared hosting while checking at http://whois.domaintools.com/localbitcoins.com
Should use good provider like www.hosticon.com

[leopard2]

https://plus.google.com/+BitcointrukkokHu/posts/UkRc4jrJAbn

Saturday, May 3, 2014

Attack against LocalBitcoins infrastructure 3.5.2014

LocalBitcoins received a very dangerous attack against the site infrastructure on Saturday 3.5.2014.
For now
All user data and Bitcoins are safe;
The site will be down for a while as the system is being rebuilt

Details

LocalBitcoins hosting provided received a request to restart the LocalBitcoins.com website server and give access to the server console (root) on Sat May 3 13:32:27. LocalBitcoins team did not initiate this request. For now, it looks like the request was made using spoofed email addresses and other weakness in the hosting provider support system.

• LocalBitcoins team was alerted about the abnormal activity when the hosting provider restarted the server.
  The attacker gained a root access to the server for ~40 minutes before the attacker was kicked out and the server shutdown.
  All data on the website s

erver is encrypted. Manual actions are needed to make this data readable, so the attacker could not gain access to the data even when having a server console access.
It is very unlikely that the attacker gained access to any data;  LocalBitcoins is still performing full investigation on the matter.

• Bitcoins in hot wallet and cold wallet are safe, as LocalBitcoins runs its bitcoind and wallets on a separate server.
  LocalBitcoins team has started to rebuild the website server on fresh hardware.

LocalBitcoins team will make further announcements when the investigation proceeds and the site becomes available again.  We expect to spend at least 24 hours on this. LocalBitcoins team apologizes the issues the downtime may cause to the users.

They were well prepared for an eventual attack.
Their reputation is now even better than before. 

YES!!! Can you believe how well this was thwarted, plus a full server rebuild in 24h?

COMPARED TO GOX??!!!!!!!!

LBC compared to Gox is like gold compared to DOGCRAP.

Great job, now if they would also do such a good job verifying bank accounts... 

[faiza1990]

Good news is site admin and devs done very good work and many features back site working

[AgentZero]

Can anyone confirm whether completing trades works now?  I have my eye on an ad at a good price but on the LBC site there's still an error  across the top

LocalBitcoins website is currently being restored. Opening contacts may have problems as the file attachments are still being copied to the server.

When I log in and see the section:
 How much you wish to buy?  and fill in an amount for FIAT, the site doesn't automatically calculate the corresponding amount in BTC or if I enter a BTC amount, it doesn't show the amount in FIAT.  I know I can calculate it manually but did they change this functionality recently? 

[Johnny Bitcoin Walker]

Strange, i still cannot access the website even after a cache clear.

[RockHound]

Can anyone confirm whether completing trades works now?  I have my eye on an ad at a good price but on the LBC site there's still an error  across the top

LocalBitcoins website is currently being restored. Opening contacts may have problems as the file attachments are still being copied to the server.

When I log in and see the section:
 How much you wish to buy?  and fill in an amount for FIAT, the site doesn't automatically calculate the corresponding amount in BTC or if I enter a BTC amount, it doesn't show the amount in FIAT.  I know I can calculate it manually but did they change this functionality recently? 

Hi AZ,

Made several trades since the site has come back online. Some features still definitely lagging (file attachments and escrow) however, all my clients received their BTC quickly, so seems to be almost back to perfect.

Non have reported issue with the calculator? Perhaps just manually calculate for now. If wrong, you can Cancel Trade Request and submit another.