3PAR 7400 Compromised needvVol recovery+user/pass reset
Posted: Tue Mar 19, 2024 12:17 am
Hello,
Hope you are all doing well. We have a HP 3PAR 7400 (OS 3.2.2.612).
Unfortunately, the virtual volumes were deleted and user/pass is compromised and changed by an attacker.
1) To access the system, we need to reset the admin user/pass. Please kindly let me know the steps to reset them in a way so that the system is not put in a state where any possibility of data recovery is lost.
2) Then we need to recover the Virtual volumes (to access the data). Can you give us any procedure to do that? How can we access logs of storage to find out what the attacker did to the storage?
Thank you in advance
Kind regards
Shaahin
Hope you are all doing well. We have a HP 3PAR 7400 (OS 3.2.2.612).
Unfortunately, the virtual volumes were deleted and user/pass is compromised and changed by an attacker.
1) To access the system, we need to reset the admin user/pass. Please kindly let me know the steps to reset them in a way so that the system is not put in a state where any possibility of data recovery is lost.
2) Then we need to recover the Virtual volumes (to access the data). Can you give us any procedure to do that? How can we access logs of storage to find out what the attacker did to the storage?
Thank you in advance
Kind regards
Shaahin