Cloud storage service Wasabi suffered an outage after suspending one of its domains – used for storage endpoints – that was hosting malware.
Wasabi is a cloud storage provider that competes with solutions like Amazon S3 by offering significantly cheaper services, with no overhead or API fees, and promises 99.999999999% data durability .
Yesterday, at around 2:30 PM EST, Wasabi users suddenly found that they could no longer access their storage bins hosted on the wasabisys.com domain.
Wasabi acknowledged the issue in a report it published, stating that DNS resolutions were causing "degraded performance."
“We are currently investigating reports of resolution issues with certain endpoints, such as s3.eu-central-1.wasabisys.com s3.us-west-1.wasabisys.com and s3.wasabisys.com. We are investigating to try to determine the source of the issue. We will update this page once we have more details,” the company said in the report.
According to the status report, the domain registrar attempted to contact Wasabi regarding malicious content hosted on the wasabisys.com domain. However, it appears that the domain registrar forwarded it to the wrong email address, so Wasabi was never notified .
This accident led the registrar to suspend the domain and take the service offline, as almost all storage bins use the wasabisys.com domain.
After being notified, Wasabi suspended the client hosting the malicious content and asked the registrar to reactivate the domain. The domain restoration took thirteen hours to complete, and was finally restored today at 12:57 PM EST.
Hackers are known to abuse legitimate cloud hosting services to host malware, and Wasabi is no exception. It is unknown what malicious content triggered the domain suspension.
Information source: bleepingcomputer.com
