I Think My Blog Is Hacked... Need Expert To Help NOW!!!

Discussion in 'Security' started by gamblingman, Nov 29, 2009.

0
  1. #1
    I think my blog is hacked and I need an expert to help me figure out how to fix it. I made a post yesterday and after I did, I hit visit site and it took me to my blog. Then about 5 seconds later it redirects me to another website. My blog is at http://www.usaplayers.com/blog and it sends me to http://poebyshki.info/. It is doing it in both IE and Firefox and the page ends up being white pages. Can someone please help me with this?

    UPDATE!!! I am now noticing that it is my whole site that is redirecting. Can I please get some help???
     
    Last edited: Nov 29, 2009
    gamblingman, Nov 29, 2009 IP
  2. Matt21

    Matt21 Peon

    Messages:
    21
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #2
    Well, not sure hos it is redirecting you to different website. I tried using both IE and FF and tried accessing few of your pages, however, I was not redirected to any other page.
     
    Matt21, Nov 30, 2009 IP
  3. SecureCP

    SecureCP Guest

    Messages:
    226
    Likes Received:
    2
    Best Answers:
    0
    Trophy Points:
    0
    #3
    Look for an injection in your sites, try grep'ing for the following: rus.info
     
    SecureCP, Nov 30, 2009 IP
  4. donluttrull

    donluttrull Peon

    Messages:
    359
    Likes Received:
    2
    Best Answers:
    0
    Trophy Points:
    0
    #4
    This happens alot during this time of year. One of mine got hacked and redirected and I located an extra file on my server. Look around in your hosting account for folders that are NOT yours. Some are hidden better within folders and powered by php or other script.

    Also check your anon ftp settings as well as anything else that might be additional login usernames that are NOT yours.
     
    donluttrull, Nov 30, 2009 IP
  5. goldfever

    goldfever Guest

    Messages:
    16
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #5
    I added a http://www.onlinecasinospins.com/news/ and locked comments for postings. What can one do to prevent your blog being hacked ? Block some ip's or countries ?
     
    goldfever, Jun 13, 2010 IP
  6. madaboutlinux

    madaboutlinux Member

    Messages:
    250
    Likes Received:
    7
    Best Answers:
    2
    Trophy Points:
    43
    #6
    Mostly, blogs/sites are hacked due to weak Ftp passwords OR insecure folder permissions (i.e. 777). Majority of the website files are injected with malicious URLs using Ftp and it can be avoided by setting a strong Ftp password and to lock down Ftp access to your local IPs (not possible on Shared server since there are hundreds of accounts hosted on it). Enable SuPHP on your server which will force you to keep 755 permissions to your files/folders thus making them secure. There are other few changes but they can be implemented only if you have root access to your servers.
     
    madaboutlinux, Jun 14, 2010 IP
  7. goldfever

    goldfever Guest

    Messages:
    16
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #7
    ok I will check for the 755 permissions and look how to lock down Ftp access to local IPs, good tip! thanks.
     
    goldfever, Jun 14, 2010 IP
  8. submitmaster

    submitmaster Well-Known Member

    Messages:
    329
    Likes Received:
    2
    Best Answers:
    0
    Trophy Points:
    103
    #8
    you guys must make sure to use long and weird passwords in order to prevent hacking,
    a good password will contain numbers, character and even characters such as ^%^&&*((
    here is a solid example of a password 61@#4fcv4%65*90()
     
    submitmaster, Jun 16, 2010 IP