Hacker is wiping Git repositories and asking for ransom

    Hacker is wiping Git repositories and asking for ransom

    Hacker is wiping Git repositories and asking for ransom

    GitHub, Bitbucket, and GitLab

    Posted: 03 May 2019

    Hundreds of developers have had had Git source code repositories wiped and replaced with a ransom demand.

    The attacks started earlier today, appear to be coordinated across Git hosting services (GitHub, Bitbucket, GitLab), and it is still unclear how they are happening.

    What it is known is that the hacker removes all source code and recent commits from vitcims' Git repositories, and leaves a ransom note behind that asks for a payment of 0.1 Bitcoin (~$570).

    The hacker claims all source code has been downloaded and stored on one of their servers, and gives the victim ten days to pay the ransom; otherwise, they'll make the code public...

    A WAY TO RECOVER

    The good news is that after digging through a victim's case, members of the StackExchange Security forum have found that the hacker does not actually delete, but merele alters Git commit headers, meaning code commits can be recovered, in some cases.

    Instructions on how to recover mangled Git repositories are available on this page...


    Read more: A hacker is wiping Git repositories and asking for a ransom | ZDNet
    Brink's Avatar Posted By: Brink
    03 May 2019


  1. jimbo45
    Posts : 11,247
    Windows / Linux : Arch Linux
       New #1

    Hi there
    Just goes to show that wherever you store stuff (whether on the cloud or your own network) you should ALWAYS have your own local backups !!!!!!!!

    Can't be said enough times.

    Even on these Forums where I would assume that most people are more computer literate than the average plenty here never bother with backups --incredible especially in these days where there are about a zillion and one good pieces of FREE software to do this.

    Again even if repeating "AD NAUSEAM" -- ALWAYS HAVE PROPER BACKUPS (Caps intended)

    Not sure though why the threat of making code public on an open place like GitHub should cause any panic though. I'd be more worried if Hackers started making things like private emails, bank account details and credit scores etc public.

    Cheers
    jimbo
      My Computer
    Quote Quote

  3. Hewjr100
    Posts : 545
    Windows 10 Pro
       New #2

    jimbo45 said:
    Hi there
    Just goes to show that wherever you store stuff (whether on the cloud or your own network) you should ALWAYS have your own local backups !!!!!!!!
    I found out the hard way. Lost all my documents on onedrive.

    Gort
      My Computer
    Quote Quote

  4. Winuser
    Posts : 7,128
    Windows 10 Pro Insider
       New #3

    Hewjr100 said:
    I found out the hard way. Lost all my documents on onedrive.

    Gort
    Do you know how you documents got lost. I have about 46 GB of files on One Drive.
      My Computers
    Quote Quote

  6. jimbo45
    Posts : 11,247
    Windows / Linux : Arch Linux
       New #4

    Hewjr100 said:
    I found out the hard way. Lost all my documents on onedrive.

    Gort
    Hi there

    @Hewjr100

    @Gort

    Hacker is wiping Git repositories and asking for ransom-snapshot10.png

    Great movie

    not the new one but the original "Day the Earth stood still" 1951 !!!

    I always find new re-makes of the original movies far worse than the classic originals.

    "klaatu"

    Cheers
    jimbo
      My Computer
    Quote Quote

  7. Winuser
    Posts : 7,128
    Windows 10 Pro Insider
       New #5

    jimbo45 said:
    Hi there

    @Hewjr100

    @Gort

    Hacker is wiping Git repositories and asking for ransom-snapshot10.png

    Great movie

    not the new one but the original "Day the Earth stood still" 1951 !!!

    I always find new re-makes of the original movies far worse than the classic originals.

    "klaatu"

    Cheers
    jimbo
    IMHO, Nothing can compare to the classic Sci-Fi movies. The Day the Earth Stood Still is one of my favorites.
      My Computers
    Quote Quote

  8. Gort
    Posts : 46
    Windows 10
       New #6

    jimbo45 said:
    Hi there

    @Hewjr100

    @Gort

    Hacker is wiping Git repositories and asking for ransom-snapshot10.png

    Great movie

    not the new one but the original "Day the Earth stood still" 1951 !!!

    I always find new re-makes of the original movies far worse than the classic originals.

    "klaatu"

    Cheers
    jimbo
    Hey, thanks for the mention. Obviously, I agree about the original film. Absolute classic.

    Concerning this thread, as has been said, it does show that one should always have local backups alongside cloud for important stuff. Online storage is convenient, but only that. Pity the remake of The Day the Earth Stood Still wasn't backed up online and lost...
      My Computer
    Quote Quote

  9. alphanumeric
    Posts : 15,037
    Windows 10 IoT
       New #7

    Everything I have on OneDrive is stored separately locally on multiple devices. Thats just how I do things.

    Getting back on topic, I told them if they don't meet my demands I'll do a divide by zero on every one of thier servers.
      My Computer
    Quote Quote

 

  Related Discussions
3rd ransom? attempt in a week
in AntiVirus, Firewalls and System Security

So far, this seems to be coming from having Microsoft Solitaire game sitting open along with chrome on the Titan TV Guide page, until today when it was sitting on the forum. Helped me decide that it probably is microsoft server that it's coming...
Method for disabling Hacker?
in AntiVirus, Firewalls and System Security

Hello: I thought I had found a way of getting rid of a hacker that has been corrupting my website, but I reached a road block in Windows 10 itself. By following the advice of three separate contributors in YouTube, I opened up the Command...
startup password ransom
in AntiVirus, Firewalls and System Security

I need help, my dad let a offsite tech service remote on to his computer, the set a startup password on it and want $200 to unlock it. All data is backed up so all I need to do is reset to factory or wipe clean, but it will not let me into any...
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

 © Designer Media Ltd
All times are GMT -5. The time now is 14:58.
Find Us




Windows 10 Forums