Hacked by T3t1K

Posted: Thu Aug 10, 2006 7:26 am

Hi all,

Just got back from a couple days away and now find my sites and subdomains hacked.

Using RavenNuke v2.02.00 with vwar, bab stats.

I really never experienced this before and believe everything was up to date, but even in cpanel my databases are gone.

Site is [ Only registered users can see links on this board! Get registered or login! ]

I have been looking through cpanel and files to see what they have done but no luck yet.

Thank god I made full backups before I left.

If anyone could point me in the right direction i would greatly appreciate it.

Thanks for your time,

Trevor

Site Admin Joined: Jun 04, 2004 Posts: 6433

Could be that you are on a shared host and another site was compromised.

Make sure you use admin authentication on both admin.php and the modules/Forums/admin directory.

Posted: Thu Aug 10, 2006 7:47 am

Thank you I just recieved this from the shared host.

I really need to get them on the dedicated server.

SRV05 SQL has been brought down to be updated after the intrusion attack last night that changed some clients index pages. We are fixing the security hole and have alerted the MySQL group of this hole and are working with them to fix the issue. We thank you for your patience. If your page was one that was affected by the intrusion, all you have to do to fix it is re-upload your index page.

Thanks for your speedy reply

Posted: Thu Aug 10, 2006 7:50 am

No problem. I wish these people would use their intelligence and hard to work for something productive...