Rackspace Blocking Zoho Email
-
We have multiple customers all reporting the same thing, emails going from Zoho customers to Rackspace customers are being blocked by IP by Rackspace.
-
OUr first response... really, Rackspace still has email?
-
Reddit has a post that Rackspace had an email ransomware incident.
Don't know about its credibility though.
-
@pmoncho said in Rackspace Blocking Zoho Email:
Reddit has a post that Rackspace had an email ransomware incident.
Don't know about its credibility though.
Interesting. I've had many customers on Rackspace have issues in the last couple days. I don't know if they are real, related or otherwise. But, that would explain things.
-
It's real, this just posted....
https://www.houstonchronicle.com/business/article/Rackspace-ransomware-attack-timeline-17635834.php
-
If you can't see that one...
https://www.axios.com/2022/12/06/rackspace-server-outage-ransomware-attack
-
@scottalanmiller
Dang. That stinks.Definitely explains your email issue.
-
@pmoncho said in Rackspace Blocking Zoho Email:
@scottalanmiller
Dang. That stinks.Definitely explains your email issue.
Yeah
-
@scottalanmiller said in Rackspace Blocking Zoho Email:
We have multiple customers all reporting the same thing, emails going from Zoho customers to Rackspace customers are being blocked by IP by Rackspace.
It's bad. There's a number of articles out there that indicate that they were pretty far behind on their patching.
My guess is HAFNIUM.
They've moved everything over to O365. No going back.
https://doublepulsar.com/rackspace-cloud-office-suffers-security-breach-958e6c755d7f
https://status.apps.rackspace.com/index/viewincidents?group=2
$40M ain't no chump change. :0(
-
About 25% of share value gone, wow.
-
@scottalanmiller said in Rackspace Blocking Zoho Email:
About 25% of share value gone, wow.
On the positive side they had segmentation so a degree of separation between their various operations.
On the negative side if it was HAFNIUM, they didn't have IPS (Intrusion Protection) in front of their hosted Exchange as our SonicWALL units with IPS turned on got an update for HAFNIUM not long after it became commonplace.
-
It also affected the Hosted Exchange servers they run for Intermedia.
-
@JasGot said in Rackspace Blocking Zoho Email:
It also affected the Hosted Exchange servers they run for Intermedia.
There's a military term that applies here: Cl-sterF-ck.
Wow.
-
@JasGot Intermedia doesn't' host as far as I know any Exchange Servers through Rackspace.
