Help! My site got hacked by cheap looking facebook-wanna be site!!

Discussion in 'Security' started by Hs McD, Mar 5, 2010.

  1. #1
    Hi guys,

    As the title mentioned one of my domain got hacked. Instead of going to the site, it will redirect visitors to their cheap looking bookface.net. Can anyone please help to recounter it? :confused:

    Appreciate anyone with any suggestion.
     
    Hs McD, Mar 5, 2010 IP
  2. Shagoon

    Shagoon Notable Member

    Messages:
    596
    Likes Received:
    20
    Best Answers:
    0
    Trophy Points:
    220
    #2
    If you have an older backup of your files you should replace all your website files with the ones from that backup, or if your webhost does weekly/monthly backups you should ask them to do that for you.

    Second of all you should review your scripts and see where the malicious code is located in... also check access logs and see where they got in through so you can patch that hole.
     
    Shagoon, Mar 6, 2010 IP
  3. links4rank

    links4rank Well-Known Member

    Messages:
    311
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    101
    #3
    Is your website wordpress based ?
     
    links4rank, Mar 6, 2010 IP
  4. Mehungwaylo

    Mehungwaylo Peon

    Messages:
    54
    Likes Received:
    1
    Best Answers:
    0
    Trophy Points:
    0
    #4
    What do you mean your domain got hacked? Either a couple of things happened...

    1. They chanegd the DNS Records: Set them back to their defaults.
    2. They uploaded a file onto the server the DNS records points to that redirects them to the website.
    3. You have to be more specific if you want more help.
     
    Mehungwaylo, Mar 6, 2010 IP
  5. Coponer

    Coponer Peon

    Messages:
    32
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #5
    Isn't that just a simple deface with index replacement? Are You sure about domain?
     
    Coponer, Mar 10, 2010 IP
  6. canldizitv

    canldizitv Peon

    Messages:
    13
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #6
    like a iframe (java) virüs ?
     
    canldizitv, Mar 10, 2010 IP
  7. Coponer

    Coponer Peon

    Messages:
    32
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #7
    Just a index replacement (ofcourse is just a guess) , if the IP is the same like site where got redirected, then yes, domain records have been changed.
     
    Coponer, Mar 10, 2010 IP