RuTube lies for the third day. Video hosting knew about the vulnerability
An example of why you should take cybersecurity seriously
The third day has gone as RuTube does not work in Russia . Video hosting said that he was the victim of a large-scale and serious cyber attack. At the same time, it was suggested that the leak of access codes to the site to the attackers could be the reason. Responsibility for breaking RuTube was taken by the hacker group Anonymous.
RuTube denied this judgment, saying that it is not true. Meanwhile, video hosting specialists, realizing that it would not be possible to “repair” the service on their own, called outside experts for help. In particular, a team of specialists from the Positive Technologies Security Center (PT Expert Security Center). It is stated that work on restoring RuTube's performance is underway and there are first results, but there is still much to be done, because "Rutube's infrastructure is quite large and complex, and now they are trying to find all the tools of hackers in all parts of the Rutube infrastructure in order to block their possible return paths."
At the same time, experts do not name the terms for restoring the efficiency of Russian video hosting. According to third-party experts, it may take at least a week to eliminate all problems. It is also interesting that there is information that RuTube knew about the existing vulnerability in the service.
Rumor has it that back in October last year, the head of the Ruform security company sent a letter to the head of video hosting Alexei Nazarov, where he pointed out the existing "hole" in the security system. In particular, they refer to server hardware, which was supplied by a subsidiary of Group-IB. The solution turned out to be "unworkable", but the video hosting did not have enough time to purchase other equipment.
Now RuTube is investigating the incident to find out the reasons for what happened and to name those who were involved in the cyber attack. It can take up to 3 weeks and after its completion it will become known whether any of the employees of the Russian video hosting service helped the attackers and whether there were frauds in the purchase of server equipment. Experts are already saying that RuTube's losses due to a large-scale failure in the service can range from 500 million to 1 billion rubles.