[AusNOG] Servers Australia

[Mitch Kelly]

A bit of Digging, Looks like this is the person in question.

https://forums.whirlpool.net.au/user/790604?days=120


On Wed, Aug 10, 2022 at 4:46 PM Karl Kloppenborg <k at rl.ag> wrote:

> Dear all,
>
>
>
> I am not affiliated with this “shanti” character, but I can say from a
> cybersec background that any person who takes to posting publicly this type
> of information from:
>
>    1. An anonymous email.
>    2. Doesn’t disclose that they’ve privately attempted to communicate
>    with the company and when that communication was and in what form.
>    3. Has not provided relevant security agency and research department
>    information.
>
> Has no business telling you about cyber security breaches.
>
>
>
> Treat this Shanti character as someone with zero honest intentions and the
> email as an attempt to bad mouth a company.
>
> With that said, I am not affiliated with SAU in any way, I am just simply
> stating facts from an industry I am active within.
>
>
>
> If it’s originated from who I think it has come from – then they’re
> absolutely not respected or to be trusted.
>
>
>
> Contact SAU for information should you be concerned, take it from the
> horse’s mouth. Not this nefarious and frankly dumbfounded email.
>
>
>
> Kind Regards,
>
> --
>
> *Karl Kloppenborg, **(BCompSc, CNCF-[KCNA, CKA, CKAD], LFCE, CompTIA
> Linux+ XK0-004)*
>
> Managing Director, Invention Labs.
>
>
>
>
>
> *From: *AusNOG <ausnog-bounces at ausnog.net> on behalf of
> shanti401 at glaptopsw.com <shanti401 at glaptopsw.com>
> *Date: *Wednesday, 10 August 2022 at 6:31 pm
> *To: *ausnog at ausnog.net <ausnog at ausnog.net>
> *Subject: *[AusNOG] Servers Australia
>
> After reading the "down again" discussion on whirlpool and receiving a
> very concerning email from Servers Australia advising us to change
> passwords, we did some research and found someone selling the Servers
> Australia customer database on the dark web this is a very concerning
> situation. Change all your passwords on all your servers and make sure
> there are no rootkits installed. Not going to include any more info we
> found here but the list of items supposedly contained in the breach is
> really bad. We are very concerned.
>
> This email was sent using www.SendEmail.in Requires: No Login No
> Password. Just Send Email
> Sent on:Wednesday, August 10, 2022 3:30:37 AM from computer IP
> Address:185.220.100.244
> _______________________________________________
> AusNOG mailing list
> AusNOG at ausnog.net
> https://lists.ausnog.net/mailman/listinfo/ausnog
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ausnog.net/pipermail/ausnog/attachments/20220810/d051c518/attachment.htm>