UrDN servers stolen

[Staff 9972]

Hello!
 
We're sorry to inform you that according to the following message from UrDN http://www.urdn.com.ua/ all the servers in the Kiev datacenter, including AirVPN servers, have been illegally stolen by Ukrainian "security services" SBU and should be released only after payment of a bribe.
 
We have no way to verify this message unfortunately, but in any case our servers, as you probably know, do not contain any log and/or any database and/or any sensitive information.
 
Therefore, Procyon and Theemim will not come back anytime soon, as UrDN declares that they will not pay any bribe/ransom to get back the servers.
 
If the message is truthful, we would like to express our complete solidarity with UrDN and condemn the acts of the Ukrainian "security services" SBU which would be identical to those of a criminal organization.

Kind regards
AirVPN Staff

 

29 October

The security service of Ukraine (SBU) has orchestrated a raid and stole all local servers and network equipments including machines which do not belong to us.

During the intervention the SBU prohibited us from calling lawyers and other legal assistance.

The SBU used falsified pseudo evidences of malware hosting to justify their operation. The purpose was to link us with the creating and the spreading ofmalwares.

Their actions are motivated by the search for money but UrDN has insignificants revenues and mostly sponsor nonprofit projects.

Those actions have became frequent over the previous months as the government developed new corruption schemes.

The SBU tried to sequestrate the team but we have been able to reach out for help. At the moment we have only limited ways to communicate but we will inform you on the situation. UrDN will never pay any bribe even if it could.

We will do our best to get the machines back.

It's with a lot of emotions that we would like to apology to all our friends and customers.

[go558a83nk 362]

sorry for AirVPN and sorry for the corruption in Ukraine.

[rocksteady72 0]

Dear AirVPN,

 

Is the security of the users affected (Cached AirVPN password)?

Keep up your good VPN Service!

 

Sent from my HM NOTE 1LTE using Tapatalk

[Staff 9972]

Dear AirVPN,

 

Is the security of the users affected (Cached AirVPN password)?

Keep up your good VPN Service!

 

 

 

 

No.

[Guest]

Really sucks that happened, hope they manage to get it back

[wunderbar 26]

What about the certificates and their keys on the stolen servers? Am I right in saying that anybody holding these certificates and keys can setup a fake AirVPN server?

[Guest]

The certificates aren't on the VPN servers, only OpenVPN, the certificates and what not is most likely on the server they use to host the site, including the authorization check gets verified on a main server, all they would then have to do is remove the IP address and deny those servers access that way it will not be part of the AirVPN Network anymore. Also wouldn't surprise me if there are daemons running that cleans the servers on intervals, if you read the home page you could see that they cycle it all the time that way old keys are also wiped, and the latest on the servers won't be working anymore.

 

(keep in mind this is how I'm sure it works, I won't actually know given that I don't have access to their servers)

[wunderbar 26]

​Does anybody have facts about it?

I.e. did the stolen servers have the OpenVPN certificates and keys inside?

[go558a83nk 362]

people, please read the original message carefully.  Staff say the severs contain no "sensitive information".  I'm sure that means certs and keys are NOT compromised. 

[Ammonia 2]

That's nothing new, SBU is known for this kind of ransom.

[hugomueller 13]

I hope you will offer other russian / ukrain server soon. Would be useful e.g. for games.