1. Advertising
    y u no do it?

    Advertising (learn more)

    Advertise virtually anything here, with CPM banner ads, CPM email ads and CPC contextual links. You can target relevant areas of the site and show ads based on geographical location of the user if you wish.

    Starts at just $1 per CPM or $0.10 per CPC.

Hacked by r00t-x

Discussion in 'Security' started by fthead9, Mar 24, 2008.

  1. #1
    Two of our sites were just hacked. Getting this message when you try to go to the site:
    by r00t-x
    uid=0(root)
    r00tx@hotmail.com ~

    Has anyone else dealt with this before? I'm not sure what to do so any help would be much appreciated.
    Thanks
     
    fthead9, Mar 24, 2008 IP
  2. Overclock099

    Overclock099 Notable Member

    Messages:
    3,648
    Likes Received:
    122
    Best Answers:
    0
    Trophy Points:
    280
    #2
    Can you post your url..?
     
    Overclock099, Mar 24, 2008 IP
  3. fthead9

    fthead9 Peon

    Messages:
    8
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #3
    rv-dream.com
     
    fthead9, Mar 24, 2008 IP
  4. Overclock099

    Overclock099 Notable Member

    Messages:
    3,648
    Likes Received:
    122
    Best Answers:
    0
    Trophy Points:
    280
    #4
    Take a look at your server..Is your index.php or index.html file has been change..?
     
    Overclock099, Mar 24, 2008 IP
  5. pixeladd

    pixeladd Banned

    Messages:
    2,238
    Likes Received:
    93
    Best Answers:
    0
    Trophy Points:
    0
  6. fthead9

    fthead9 Peon

    Messages:
    8
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #6
    I can't FTP in, keeps giving me an error message.
     
    fthead9, Mar 24, 2008 IP
  7. Overclock099

    Overclock099 Notable Member

    Messages:
    3,648
    Likes Received:
    122
    Best Answers:
    0
    Trophy Points:
    280
    #7
    Hmm.. Seem your account have lost your control..:eek:
     
    Overclock099, Mar 24, 2008 IP
  8. fthead9

    fthead9 Peon

    Messages:
    8
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #8
    Any ideas on how to regain control?
     
    fthead9, Mar 24, 2008 IP
  9. Political Monster

    Political Monster Peon

    Messages:
    119
    Likes Received:
    1
    Best Answers:
    0
    Trophy Points:
    0
    #9
    Is this a dedicated server or shared account? If shared, you'll have to contact your host, if dedicated, have you tried ssh?
     
    Political Monster, Mar 24, 2008 IP
  10. SSANZ

    SSANZ Peon

    Messages:
    861
    Likes Received:
    10
    Best Answers:
    0
    Trophy Points:
    0
    #10
    Your backdoored also, rebuild and reconfig server, secure and migrate old data back on.

    Good luck :)

    Regards,
    SSANZ
     
    SSANZ, Mar 24, 2008 IP
  11. fthead9

    fthead9 Peon

    Messages:
    8
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #11
    Thanks everybody for the comments. Looks like the hosting company managed to get it resolved. Definite scare but it looks like it was just a front facing hack.
     
    fthead9, Mar 25, 2008 IP
  12. gpuk

    gpuk Peon

    Messages:
    2
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #12
    I recently had this issue with 2 of my sites, which I have now downed. I won't name the hosting provider I use, but I cannot understand why my websites have been hacked into for a second time. I have had basic HTML/CSS index pages up online, until I got both sites properly setup offline. It's made me think about if I should bother continuing with either project if my websites are easily hacked.

    I assumed once I deleted the pages affected the problem will be over, but perhaps not. I will have to read up on proper website security issues and inform my host of what has happened.

    Is it common for hosting servers to get hacked?
     
    gpuk, Apr 19, 2008 IP
  13. falsealarm

    falsealarm Peon

    Messages:
    101
    Likes Received:
    5
    Best Answers:
    0
    Trophy Points:
    0
    #13
    No it's not common for hosting accounts/servers to get hacked unless the hosting company has failed to take the proper security steps. The same applies to virtual and dedicated hosting accounts. If he is unable to access via FTP or SSH, I suspect this was a script issue where the running site script was comprised.
     
    falsealarm, Apr 19, 2008 IP
  14. gpuk

    gpuk Peon

    Messages:
    2
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #14
    Thanks for your reply and thoughts. I was asked by my host a minute ago to change file permissions of my domain folders and my index files. Maybe this was the key issue, I'm not sure. I think they are going to check to ensure nothing else was changed.

    Either way I think I need to read up more on website security.
     
    gpuk, Apr 19, 2008 IP
  15. r00t.kz

    r00t.kz Peon

    Messages:
    2
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #15
    r00t.kz GNU/Linux FreeBSD SUN Solaris
     
    r00t.kz, May 24, 2009 IP
  16. r00t.kz

    r00t.kz Peon

    Messages:
    2
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #16
    r00t.kz GNU/Linux FreeBSD SUN Solaris
     
    r00t.kz, May 24, 2009 IP