Beget, one of Russia's largest domain registrars and hosting companies, said Wednesday that it had begun bringing some servers back online following the attack, which took place overnight on Sunday. "Restoring all services will take a considerable amount of time, as more than 1,000 servers must be manually inspected," the company said.
According to Beget's statement, the attackers gained access to systems used to manage the company's infrastructure, allowing them to execute scripts designed to erase data. The damage was particularly severe in Beget's cloud infrastructure, where data associated with virtual private servers (VPS), cloud storage and Kubernetes services was wiped. The company said it had also lost all binary backups of its virtual servers, although file-level backups remained intact and could potentially be used to recover some information.
