Neverside

AbsoluteCross.com hacked

Someone hacked AbsoluteCross today, as well as the other sites on Wilfried's server. Every page on the site was overwritten with a blank page that says "by Thehacker"

I'm currently restoring everything from my backups. Neverside is on a different server so has not been affected.

I'm not sure how they did it, or if they will do it again as soon as I fix the issue. They may have root access. Wilfried is not home right now but said he will login and figure out what happened when he gets home.

What a pain.

___________________

-- Dave
Neverside Admin

absolutecross.com

Last edited by AbsoluteCross, August 11th, 2006 09:33 AM (Edited 1 times)

Sorry to hear that.

Stupid people on the net. When will people grow up?

___________________

Why are we friends? Srsly...

Originally posted by Rider:

When will people grow up?

Too true. Unlucky Dave

That's really unfortunate.

I'm glad you have backups to restore everything though.

Looks like it wasn't as personal as I thought:
http://www.threadwatch.org/node/7763
http://forums.site5.com/showthread.php?t=11780
http://forum.mamboserver.com/showthread.php?p=384257
etc...

Wilfried has told me now that a Joomla-based site on a client's site on the server was the likely cause, which gave them access to apply their hack to every site on the server. We're looking into the issue now to ensure that Neverside isn't in danger (and if it is, to try to prevent it). Evidently this is happening to many Joomla/Mambo based sites (or servers that have them installed anywhere). I have ensured that there are no instances of Joomla/Mambo on this server.

Anyhow, I'll keep you posted - and please if anyone has any new info, please let me know.

___________________

-- Dave
Neverside Admin

absolutecross.com

Last edited by AbsoluteCross, August 11th, 2006 10:31 AM (Edited 2 times)

I hope you find that arse and string him up by the testes! I need to check my site now...brb
EDIT: Nope...I'm fine

___________________

Neverside - In Development. Expected Release: Unknown.
Tortustudios.com - In Development. Expected Release: Summer 2006.( You can visit it now)

Last edited by kidd175, August 11th, 2006 11:09 AM (Edited 1 times)

I'd backup your goodies to your home computer if I were you though.... it seems this can affect sites that are just on the same server as other sites that are vulnerable, even if your own site has no security holes. If you're on a virtual host, there's a very high chance there's at least one person running Joomla/Mambo there (so far nothing I've read has been conclusive on the cause though).

I think I've finished cleaning up all of this on my sites... could have missed a page or 2, but close enough for the moment.

___________________

-- Dave
Neverside Admin

absolutecross.com

I thought you guys all knew how to hack....you sound like you know so much....

Originally posted by Lexykon:

I thought you guys all knew how to hack....you sound like you know so much....

*pings Lexykon*

___________________

There is no theory of evolution. Just a list of creatures Chuck Norris has allowed to live.

hackers got no life, although they get good money for that, haha

___________________

I Swim Therefore I Am!