
Hosting provider 4VPS·SU has reported a hacker attack on its website and client billing system. Attackers pulled off a proxy server swap, briefly directing the 4vps domain to a phishing address. The message about an alleged full infrastructure wipeout that visitors saw on the site? Pure fiction — planted by the attackers themselves.
What Actually Happened
The main hosting infrastructure took no physical damage, and client data remains intact. The billing system, however, is temporarily down — engineers are restoring its structure and data. Some servers are unavailable for two reasons: on a portion, the network was cut urgently to stop the attack from spreading; on another portion, the attackers managed to damage the GRUB bootloader. The data itself is untouched — just the boot process is having a tantrum.
The list of affected servers may still grow as the full infrastructure diagnostic continues.
What Engineers Are Doing Right Now
The 4VPS·SU team is actively restoring billing from backups and "healing" damaged structures. DNS routing is being set straight, and compromised proxy links are being kicked to the curb. A full inventory of all servers is underway: those with network cuts are being reconnected, and machines with broken GRUB are getting a bootloader fix — data stays out of harm's way.
Servers that are currently down should return to normal operation soon. Engineers are already switching them back to standard management channels.
What Clients Should Do
Affected customers are advised to stay calm — servers, sites, and apps will return to normal shortly, and those already running remain safe. Until the billing panel is back, official updates are being posted on the Telegram channel @FourServer. Clients are told not to click suspicious links and, once access is restored, to change their billing password without delay. The company apologized for the inconvenience and promised to keep downtime to a minimum.