VMmanager 6 Breach: A Security Threat to Russian Internet Companies

Clients of hosting providers received warnings about the compromise of VMmanager 6, a virtual server management program. Hackers can access Russian internet companies through a vulnerability in this popular software.

The list of stolen data includes passwords, SSH keys for server access, cloud service tokens, and configuration files. Attackers may also have captured command history, crypto wallets, and user documents.

Experts call the incident extremely dangerous due to the scale of the infrastructure. VMmanager users include hostings with tens of thousands of virtual machines, banks, universities, and medical organizations.