Thousands of dark web sites offline following hack of leading hosting provider
Leading dark web hosting services provider Daniel’s Hosting has been hacked, taking about 6,500 sites offline.
The free hosting service was targeted on Thursday in an apparent attack by hackers so gained root access via phpmyadmin and adminer to take control of the hosting server and then delete all of the sites.
Founded by Daniel Winzen in 2013, Daniel’s Hosting offered free accounts for onion sites on the dark web — a shady part of the internet reachable with special software — with some restrictions. Exactly what was contained on the deleted sites isn’t clear, but Winzen pitched the service as a place for more legitimate content versus some of the more nefarious types of content and commerce the dark web is best known for.
Since the service was also pitched on privacy grounds, there are no backups of the deleted sites, so the hosting service cannot be reverted to a previous, nonhacked state.
“There is no way to recover from this breach, all data is gone,” Winzen wrote Friday. “I will re-enable the service once the vulnerability has been found, but right now I first need to find it. Most likely in December the service will be back up.”
The source of the hack has not been confirmed, but that hasn’t stopped various sites speculating on who may be behind it.
Security Affairs noted that cybercrime syndicates, nation-state hackers, intelligence and law enforcement agencies are all possible suspects with valid motivations. Latest Hacking News suggested it may be the U.S. Central Intelligence Agency.
Dark-web hosting sites have been targeted in the past, but usually because they hosted illegal content. Although it’s not known what Daniel’s Hosting was hosting, if it was hosting illegal content Daniel Winzen’s public presence, including a GitHub page, would be odd.
Some of the better-known dark-web takedowns include Freedom Hosting in 2013 and an operation lead by Anonymous in 2017 that brought Freedom Hosting II down. The latter was the largest hosting provider on the dark web at the time and host to a range of illegal activities, including child pornography.
Image: Public Domain Pictures
Since you’re here …
… We’d like to tell you about our mission and how you can help us fulfill it. SiliconANGLE Media Inc.’s business model is based on the intrinsic value of the content, not advertising. Unlike many online publications, we don’t have a paywall or run banner advertising, because we want to keep our journalism open, without influence or the need to chase traffic.The journalism, reporting and commentary on SiliconANGLE — along with live, unscripted video from our Silicon Valley studio and globe-trotting video teams at theCUBE — take a lot of hard work, time and money. Keeping the quality high requires the support of sponsors who are aligned with our vision of ad-free journalism content.
If you like the reporting, video interviews and other ad-free content here, please take a moment to check out a sample of the video content supported by our sponsors, tweet your support, and keep coming back to SiliconANGLE.