store

A new malware has been discovered in 53 different apps on Google Play, that could steal Facebook credentials and push ads to infected devices. Exposed by security researchers at Trend Micro as ANDROIDOS_GHOSTTEAM, the malware was present in many apps, created as early as April 2017. These Android apps were published in Play Store as utility apps (flashlight, QR code scanner, compass), video downloaders for social media, and performance boosters (file transfer, cleaner). One of the app was downloaded over 100,000 times, and seemed to have infected thousands of users. Trend Micro found that samples of some of these apps were in Vietnamese language, indicating that the apps were developed in Asia. The configurations of GhostTeam were in English and Vietnamese, and if the geolocation of the user was outside Vietnam, English will be the default language. The malware was primarily affecting Android users in India, Indonesia, Brazil, Vietnam, and Philippines. It was rapidly spreading via…
Read more

Filed under Web Hosting News by on #

Hackers have now attacked the online sites who were using a customer support extension built using Magento, as reported by security researcher Willem de Groot. The extension called Mirasvit Helpdesk MX, is used by online merchants to show a “Chat with us” widget on the Magento shops. WebShield, the Hungarian security firm, had reported in September 2017 that Mirasvit Helpdesk extension was vulnerable to two flaws. One enabled hackers to upload files to Magento servers, while another was found to be a banal cross-site scripting issue. According to de Groot, the hackers have this time used the cross-site scripting issue to crack Magento sites. He said that attackers injected the malicious code (XSS payload) in the “Chat with us” widget displayed on Magento stores, whose messages were stored in Magento database. Once injected, the malicious code executed on the pages in the Magento store to collect sensitive payment information of customers from the checkout process. The support…
Read more

Filed under Web Hosting News by on #

Apple has made changes to revised app store guidelines that threatened to block a wide range of small business apps created with templates, DIY tools, and SMB app platforms.
The guidelines were originally revised earlier this year to ensure a minimum standard of quality and uniqueness for apps accepted to the App Store, and to make sure that they are not simply "wrapped" websites or social media pages. The revisions were also intended to limit spam in the App Store. A number of developers and app-creation companies catering to SMBs and non-profit organizations that had thought they would be unaffected by the changes, however, were recently informed that their apps would be banned as of January 1.
App store review guideline 4.2.6 previously said: "Apps created from a commercialized template or app generation service will be rejected."
The rule has now been amended to read: "Apps created from a commercialized template or app generation service will be rejected unless they are submitted directly by the provider of the app's content. These services should not submit apps on behalf of their clients and should offer tools that let their clients create customized, innovative apps that provide unique customer experiences. Another acceptable option for template providers is to create a single binary to host all client content in an aggregated or "picker" model, for example as a restaurant finder app with separate customized entries or pages for each client restaurant,
Read more

Filed under Web Hosting News by on #

SEATTLE – Amazon Web Services, Inc. (AWS), an Amazon.com company (NASDAQ:AMZN), announced the launch of the AWS EU (Paris) Region. With this launch, AWS now provides 49 Availability Zones across 18 technology infrastructure regions globally with another 12 Availability Zones and four regions in Bahrain, Hong Kong SAR, Sweden, and a second AWS GovCloud Region in the US expected to come online by early 2019. The AWS EU (Paris) Region is AWS’s fourth in Europe, joining existing regions in Germany, Ireland, and the UK. Tens of thousands of French customers already use AWS in other regions, and starting today, developers, startups, and enterprises, as well as government, education, and non-profit organizations, can leverage AWS to run applications and store data in France by going to: https://aws.amazon.com/fr/paris/

The AWS EU (Paris) Region offers three Availability Zones. AWS Regions are comprised of Availability Zones, which refer to technology infrastructure in separate and distinct geographic locations with enough distance to significantly reduce the risk of a single event impacting availability, yet near enough for business continuity applications that require rapid failover. Each Availability Zone has independent power, cooling, physical security, and is connected via redundant, ultra-low-latency networks. AWS customers focused on high availability can design their applications to run in multiple Availability Zones to achieve even greater fault tolerance. Additionally, the new AWS EU (Paris) Region gives customers with data sovereignty requirements the ability to store their data in France with the assurance that their content will not move unless they move it. The new Region adds to the existing infrastructure AWS already has in France, which includes three Edge Network Locations in Paris and one in Marseille, for customers looking to deliver websites, applications, and content to end users with low latency. These are part of AWS’s existing network of 107 Points of Presence (96 Edge Locations and 11 Regional Edge Caches) globally.


“For over a decade, AWS has been supporting French builders and entrepreneurs, in enterprises and startups, on their quest to reinvent and evolve their customer’s experiences,” said Andy Jassy, CEO of Amazon Web Services, Inc. “We have tens of thousands of French customers using AWS from regions outside of France, but we’ve heard them loud and clear and are excited to deliver them an AWS Region in France, so they can easily operate their most latency-sensitive workloads or house any data that needs to reside on French soil.”

Politicians and officials, from French central and local government, also welcomed the opening of the AWS EU (Paris) Region. “The establishment of the AWS Region in France reinforces the attractiveness of our country for digital companies, strengthens the trust of French organizations in the cloud, and creates the right conditions for their digital transformation,” said Éric Bothorel, La République En Marche! representative in the French National Assembly and member of the Economic Affairs Commission, with a focus on Digital Affairs. “The digital revolution is bringing about major economic, social, and societal changes and represents a tremendous growth opportunity for the benefit of the French economy as a whole. The cloud is the essential tool to ensure the development of this new economy and the digital transformation of businesses. It is also an important generator of jobs and we are glad to see AWS is a key part of this.”

Valérie Pécresse, President of Ile de France, also welcomed the new AWS infrastructure region saying, “We are delighted that Amazon Web Services is investing heavily in the opening of its datacenters in Île-de-France. It is a recognition of the strength and attractiveness of Ile de France, which is establishing itself as the technical hub of Europe. The region has already become established in the eyes of large companies and startups that have set up their headquarters in the metropolitan area. AWS’s choice to locate their datacenters here will help to attract even more companies and validates our ambition to be the first smart region of Europe.”

One of the reasons customers in France are moving to AWS is the company’s investment in security, compliance, and data protection. All AWS infrastructure regions around the world are designed, built, and regularly audited to meet the most rigorous compliance standards and to provide high levels of security for all AWS customers. These include ISO 27001, ISO 27017, ISO 27018, SOC 1 (Formerly SAS 70), SOC 2 and SOC 3 Security & Availability, PCI DSS Level 1, and many more. This means customers benefit from all the best practices of AWS policies, architecture, and operational processes built to satisfy the needs of even the most security sensitive customers.

AWS is certified under the EU-US Privacy Shield and the AWS Data Processing Addendum (DPA) is GDPR-ready and available now to all AWS customers to help them prepare for May 25, 2018, when the GDPR becomes enforceable. AWS’ DPA terms allow customers to transfer personal data to countries outside the European Economic Area (EEA) in compliance with European Union (EU) data protection laws. AWS also adheres to the Cloud Infrastructure Service Providers in Europe (CISPE) Code of Conduct. The CISPE Code of Conduct helps customers verify that AWS is using appropriate data protection standards to protect their data, consistent with the GDPR. In addition, AWS offers a wide range of services and features to help customers meet the requirements of the GDPR, including services for access controls, monitoring, logging, and encryption.

Customers and APN Partners welcome the new AWS infrastructure Region to France

In France, AWS works with tens of thousands of customers, including more than 80 percent of companies listed on the CAC 40, the French stock market index. Enterprises such as Canal+, Capgemini, Decathlon, Engie, LafargeHolcim, Le Figaro, Les Echos, Mondadori France, Nexity, Schneider Electric, Societe Generale, Soitec, TF1, and Veolia, are now using AWS to speed their time-to-market, lower their costs, and support their businesses globally.

CAC 40 enterprise Schneider Electric is a leader in energy management and automation and is using AWS to support its transition to becoming a digital business. “For the past six years, we have been working with AWS as a key technology provider to support our digital transformation,” said Hervé Coureil, Chief Digital Officer, Schneider Electric. “By migrating our old IT systems to the cloud, we can accelerate our time to market, lower our IT costs, and better support our global business operations. For example, we are building our enterprise big data platform on AWS to give us the ability to centralize data from dozens of critical operational systems. Using AWS enables us to accelerate key decision-making processes and gain meaningful insights from large datasets for our pricing, logistics, human resources, and risk management applications.”

Another CAC 40 enterprise using AWS to support innovation in its business is Societe Generale, one of the largest banks in France and the world. “Societe Generale Group has been working with AWS to accelerate its digital transformation while complying with European and French financial services regulations. Using AWS, we developed SG Research, an application that makes Societe Generale’s analyst reports available to corporate customers allowing them to make better investment decisions,” said Carlos Goncalves, Head of Global Technology Services, Societe Generale. “We welcome the new AWS Region in France as it will help to accelerate the deployment of our hybrid strategy by delivering lower latency between applications running in the cloud and our information systems running in French data centers.”

As well as large, security-conscious enterprise organizations, the public sector in France is also entrusting AWS with mission critical workloads to deliver the highest levels of security and privacy. Public sector organizations using AWS to transform the services they deliver to the citizens of France include Kartable, Les Restos du Coeur, OpenClassrooms, Radio France, Société Nationale des Chemins de fer Français (SNCF), and many others.

SNCF, the French state-owned railway company, chose to build its SNCF mobile application on AWS to give traffic information to the 14 million travelers across its network in real time. “Using AWS, we are able to absorb peaks of hundreds of thousands of users per second on our mobile application. In times of extreme weather, traffic events, holidays, or engineering work, many travelers will connect to the application at once, and AWS gives us the ability to scale to cater to all of our travelers,” said Agnes Chiroux, SNCF Application Project Manager. “The new AWS Region in France is an opportunity for us to speed-up innovation and ensure a good experience for our users. In the future, we expect to develop new predictive features for the SNCF application, using machine learning and big data services in the AWS Region in France, to deliver reliable information to travelers. Using the new AWS Region will enable us to pursue our mission which is to keep travelers informed in real time and always suggest the fastest and easiest way to reach their destination.”

Non-profit organizations are also adopting AWS to innovate and better complete their mission of helping the underprivileged people of France. One example is Les Restos du Coeur, a French charity that provides assistance to the needy, delivering food packages, and participating in their social and economic integration back into French society. Les Restos du Coeur is using AWS for its Customer Relationship Management (CRM) system to track the assistance given to each of its beneficiaries and the impact this is having on their lives. AWS offers Les Restos du Coeur high levels of security, which is essential for managing beneficiaries’ personal data. “We are delighted to learn that Amazon Web Services has opened data centers in France as it now gives us the option to keep the personal data of our beneficiaries in the country as we expand our use of the cloud,” said Patrice Blanc, CEO at Restos du Coeur. “We started our journey to the cloud by building our CRM system on AWS, which is used by thousands of volunteers in more than 2,000 centers. This allows our teams to manage how we serve beneficiaries and their participation in activities to get them back into society, such as resume writing workshops, cooking classes, French lessons, computing courses, and more. Using AWS, we can now deliver personalized support to each of our beneficiaries and this insight is helping us to bring more people out of poverty, get them into work, and further our mission of helping the people of France.”

Some of the most successful startups—as well as established enterprises and public sector organizations—in France are using AWS to build and rapidly expand their businesses across the country, throughout Europe, and around the world. Companies such as 1001 Pharmacies, Botify, CaptainDash, ContentSquare, Drivy, FrontApp, Iconosquare, Invoxia, Ividata, La Ruche Qui dit Oui!, Linxo, ManoMano, Nestor, Peter, Photobox, Predicsis, Pretty Simple, Realytics, Silkke, Slimpay, Softbank Robotics, Teads, Yomoni, and many more have embraced AWS as the infrastructure that is powering their businesses. One well-known example is AlloResto by JustEat, a leader in the French foodtech industry, which is using AWS to scale to cope with peaks in traffic as well as to innovate faster on behalf of its customers. “We are pleased that the new AWS EU (Paris) Region has now opened as it will allow us to store data closer to our thousands of French customers, lower the latency of running our application, and improve the customer experience,” said Noel Ly, International Platform Manager at AlloResto by JustEat. “We are running a foodorder platform that connects clients with participating delivery and takeaway restaurant partners which means our business sees intense spikes of activity for a few hours of the day, at lunchtime and again at dinner. Our website needs to scale up easily, and thanks to AWS, we are able to do this, fulfilling over 10 million orders this year. Using AWS, we estimate we will reduce our IT costs by around 50 percent in the next two years, something that would have been impossible with our previous co-location environment and for a company like us, saving costs is vitally important to the business. With AWS our stability has never been better which allows us to deliver customers a reliable and responsive application, as well as gourmet food.”

Startups in the regulated financial services industry are also using AWS to increase agility while ensuring the highest levels of security for their applications as they grow their businesses. PayPlug is an online credit card payment solution, which enables e-merchants to enrich their customer experience by providing user-friendly mobile payment gateways. “AWS has been key to the success of our business by providing us with a highly secure, compliant, and PCI DSS-certified infrastructure out of the box,” said Camille Tyan, CEO PayPlug. “When we started PayPlug, a service provider told us that we were too small and that it would be far too complicated for us to get PCI DSS certification, but they changed their mind as soon as we told them our data is hosted on AWS, due to the high levels of security and compliance it provides. Since then, in November 2016, we became one of the first FinTech startups operating on AWS to obtain the French Prudential Supervision and Resolution Authority (Autorité de Contrôle Prudentiel et de Résolution – ACPR) payment institution license. Now with AWS infrastructure in France, we look forward to further expanding the long list of financial services certifications and accreditations we have.”

French-based AWS Partner Network (APN) Partners also welcomed the arrival of the AWS EU (Paris) Region. The APN includes tens of thousands of Independent Software Vendors (ISVs) and Systems Integrators (SIs) around the world with APN participation among French based entities growing significantly over the past 12 months. APN Partners build innovative solutions and services on AWS and the APN helps by providing them with business, technical, marketing, and go-to-market support. In France, APN SIs supporting customers as they move to AWS include Premier Consulting Partners such as Accenture, Capgemini, Claranet, CloudReach, DXC, and Edifixio as well as Advanced Consulting Partners such as ABC Systemes, Atos, CoreExpert, Cycloid, D2SI by Devoteam, Linkbynet, Oxalide, Ozones, Scaleo, and Sopra Steria. These Partners are helping enterprise and public sector customers migrate to AWS, deploy mission-critical applications, and provide a full range of monitoring, automation, and management services. APN ISVs including Axway, Commerce Guys, Efront, MicroStrategy, Sage, Software AG, Splunk, Talend, Tibco, and Zerolight are already serving their French customers from AWS Regions around the world, with many also making their software available from the AWS EU (Paris) Region at launch. Customers can also easily find, trial, deploy, and buy software solutions for AWS on the AWS Marketplace.

Capgemini, a CAC40 company and global leader in consulting, technology services, and digital transformation, also welcomed the opening of the new AWS EU (Paris) Region. “We have been working with many regulated companies that want to store their data on French soil and, at the same time, take advantage of AWS, so we are excited about the benefits the new AWS Region in France will bring to our customers,” said Aiman Ezzat, Group Executive Board Member at Capgemini. “As well as French enterprise and public sector organizations, we also see this opening up an opportunity for our many international customers to expand their presence in France and to give their end users low-latency access to their applications in the country. We look forward to working with our customers on the migration of their workloads to this new AWS Region.”

Developers and businesses can access the AWS EU (Paris) Region beginning today. A full list of services is available at https://aws.amazon.com/fr/paris/

About Amazon Web Services
For more than 11 years, Amazon Web Services has been the world’s most comprehensive and broadly adopted cloud platform. AWS offers over 100 fully featured services for compute, storage, databases, networking, analytics, machine learning and artificial intelligence (AI), Internet of Things (IoT), mobile, security, hybrid, virtual and augmented reality (VR and AR), media, and application development, deployment, and management from 49 Availability Zones (AZs) across 18 geographic regions in the U.S., Australia, Brazil, Canada, China, France, Germany, India, Ireland, Japan, Korea, Singapore, and the UK. AWS services are trusted by millions of active customers around the world—including the fastest-growing startups, largest enterprises, and leading government agencies—to power their infrastructure, make them more agile, and lower costs. To learn more about AWS, visit https://aws.amazon.com.

About Amazon
Amazon is guided by four principles: customer obsession rather than competitor focus, passion for invention, commitment to operational excellence, and long-term thinking. Customer reviews, 1-Click shopping, personalized recommendations, Prime, Fulfillment by Amazon, AWS, Kindle Direct Publishing, Kindle, Fire tablets, Fire TV, Amazon Echo, and Alexa are some of the products and services pioneered by Amazon.

Read more

Filed under Web Hosting News by on #

Amsterdam, the Netherlands – 3W Infra, a fast growing Infrastructure-as-a-Service hosting provider from Amsterdam with global operations and more than 4,000 dedicated servers under management, has attained the ISO/IEC 27001:2013 certification for Information Security Management together with Payment Card Industry Data Security Standard (PCI DSS) compliance. Validated by independent third-party IT audit company Noordbeek B.V., these certifications would help 3W Infra ensure that they have enterprise-grade controls in place to protect customer information and payment data while safeguarding business continuity.

IT audit company Noordbeek B.V. has checked and validated a variety of processes as well as management and operating controls within 3W Infra’s organization to be able to grant 3W Infra the two ‘enterprise-grade’ security certifications.


To ensure that customers’ information is secure with 3W Infra, Noordbeek has validated things like 3W Infra’s business continuity, the documentation of organizational processes, separation of duties, managing (strategic) suppliers, IT system management, human resources policies and procedures, physical security measures in the offices and data center environment, handling and embedding of organizational knowledge, security incident reporting, and more.

3W Infra has received the ISO/IEC 27001:2013 and PCI-DSS certifications from Noordbeek IT Audit, Compliance & Advisory now and is able to send the third-party attestations to customers on their request.

“We see quite some service providers in the worldwide hosting industry eager to serve enterprises and other customers with high demands and mission-critical operations, but we don’t see many of them achieving accreditations like ISO/IEC 27001:2013 and PCI-DSS, especially not the relatively smaller hosting providers,” said Roy Premchand, Managing Director of 3W Infra. “We know it’s not cheap to have these ISO/IEC 27001 and PCI-DSS quality guarantees embedded in your organization, but we think it’s a good step towards GDPR compliance and a big plus for our mission-critical customers who already entrust their IT infrastructure to 3W Infra – among them international companies within gaming as well as cloud services providers with global operations. Besides that, we expect these enterprise level accreditations to bring great value on a global level while attracting new types of customers from around the world within for example healthcare, finance, and government.”

SSAE 16 Certification

On top of the ISO/IEC 27001:2013 and PCI-DSS certifications achieved, 3W Infra is targeting expansion of accreditations embedded in the organization with an SSAE 16 certification in the future. While PCI-DSS is focused specifically on the data security of credit card information stored in a facility, SSAE 16 is more generally focused on the services operating environment and the internal controls of 3W Infra as a service provider.

“Although we’re a pure-play IaaS hosting provider, not a data provider, we do deliver managed engineering services through our Remote Hands solution to data services providers who store and process financial information,” added Mr. Premchand. “Our Data Center Neutral Remote Hands Service on the world’s main Internet hubs in Frankfurt, Amsterdam and London, thus may require us to go for this SSAE 16 accreditation as well. Especially because the clients for this Remote Hands engineering service come from all over the world. Most of them are not in the position to drop by in the data center to check data processes and handling themselves. The 3W Infra engineering teams are an extension of their own organization so to say, and SSAE 16 would provide them an end-to-end data security guarantee.”

About ISO/IEC 27001 and PCI-DSS

ISO/IEC 27001:2013 is a worldwide-recognized information security management standard which would ensure that an organization can apply a framework to business processes to help identify, manage and reduce risks to information security. The standard does not only consider IT but all business operations of an organization.

The PCI-DSS (Payment Card Industry Data Security) standard is a proprietary standard for all organizations that process, transmit, or store payment cardholder data. The standard is providing a framework with technologies and practices that would need to be adhered to in order to protect and secure the cardholder data.

About 3W Infra
Founded in 2014 by some Internet and hosting industry veterans, 3W Infra is a global Infrastructure-as-a-Service (IaaS) hosting provider with great engineering knowledge and skills headquartered in Amsterdam, the Netherlands. The company’s enterprise-grade, ISO/IEC 27001:2013 and PCI-DSS certified hosting solutions are tailored to the specific needs of each customer. 3W Infra’s infrastructural solutions are engineered for scalability and cost-efficiency, with cloud-enabling services including colocation, dedicated servers, IP Transit, and high-level customer support. These solutions come with 3W Infra’s Remote Hands including Relocation engineering services at the world’s main Internet hubs in Amsterdam, Frankfurt and London.

As a fast-growing company aiming for sustainable growth, 3W Infra serves a dynamic array of different customer types with a variety of needs. The company’s flagship data center in Amsterdam features one of the lowest calculated pPUEs in the industry (1,04), which is highly energy-efficient. 3W Infra has a significant amount of colocation customers and more than 4,000 dedicated servers under management, while its global network now exceeds 160 Gigabit/sec (Gbps) of available bandwidth. 3W Infra’s customer base includes some of the largest Internet, gaming, broadcasting and cloud services companies in Europe and beyond.

To learn more about 3W Infra, visit: www.3winfra.com

About Noordbeek IT Audit, Compliance & Advisory
Noordbeek B.V. was founded in 2006 by Prof. Dr. Ir. Ronald Paans, Professor of Postgraduate IT Audit training at the VU University in Amsterdam. Noordbeek is an IT audit and consulting firm specializing in certification programs and handling of complex IT-related issues. Offerings range from certifications in the field of PCI DSS, ISO 27001, ISAE 3402, COBIT 5.0 to consultancy projects such as improving the connection of IT to business processes and making the cooperation between service provider and customer more effective.

Read more

Filed under Web Hosting News by on #

SCOTTSDALE, AZ – GoDaddy Inc. (NYSE: GDDY), the world’s largest cloud platform dedicated to small, independent ventures, announced two new integrations with Square that help small businesses thrive with online and offline selling and payment capabilities.

Increasingly, businesses need to operate both in person and online to succeed. By collaborating with Square, GoDaddy is making this an easy reality for tens of millions of people building small businesses. As a first step in the partnership, GoDaddy has integrated Square payments for e-commerce product sales and online appointment booking in GoCentral, GoDaddy’s mobile-optimized website builder. Integrating GoCentral Online Store and Square online payments enables small businesses to easily sell their products and services online and in person through a single Square account and GoDaddy website.


The second integration provides service-based businesses, such as personal trainers, hair stylists and photographers, the ability to book client appointments online, sync calendars using GoCentral, and get paid using Square. Payment transactions can be processed online, in-person or both without switching accounts.

“Teaming up with Square will simplify the path to success for a wide range of small businesses from clothing and apparel makers to fitness trainers,” said Greg Goldfarb, Vice President of Commerce Products at GoDaddy. “We’re solving everyday problems for millions of ventures that need to operate both online and offline so they can realize their potential with customers.”

“Increasingly, businesses need powerful, integrated tools to grow an omni-channel business,” said Pankaj Bengani, Square’s Partnerships Lead. “By working with GoDaddy we’re making it even easier for businesses to simplify their operations and manage all the ways they sell and get paid.”

About GoDaddy
GoDaddy powers the world’s largest cloud platform dedicated to small, independent ventures. With more than 17 million customers worldwide and nearly 73 million domain names under management, GoDaddy is the place people come to name their idea, build a professional website, attract customers and manage their work. Our mission is to give our customers the tools, insights and the people to transform their ideas and personal initiative into success. To learn more about the company visit www.GoDaddy.com.

Read more

Filed under Web Hosting News by on #