Forum Moderators: phranque

Message Too Old, No Replies

Server Hacked

It had to happen some day

         

fashezee

7:27 pm on Nov 17, 2009 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Can someone bring down a server with a simple FTP account?

Our server recently has been compromised and now we need a new one. We recently gave FTP access to developer on Europe on behalf of out client, and now bang! all down.

jdMorgan

9:20 pm on Nov 17, 2009 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Well, the developer could have knowingly or unknowingly uploaded *anything* onto your server...

Jim

fashezee

11:49 am on Nov 18, 2009 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



what a basic FTP account; a script can be uploaded that would comprise the server?

Leosghost

12:56 pm on Nov 18, 2009 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



The hardest thing is to get in ( you gave a key ..albiet to just one room or apartment ) ..Once in ..what can be done depends on how hard the walls are between the apartments ..and yes ..lots of things can be uploaded ..once someone is in ..which can seriously compromise the server ..and some can squirrel themselves away and survive cursory "sanitizing" ..

Plus it's actually quite easy to unwittingly bork things just by inattention ..such as deleting something crucial because of a slip of the mouse ..

From your own computor(s) ...to a server ..

I know it's not your priority right now ..but it's always a good idea to "image" important stuff ( even entire servers ) before letting people "tinker" ..even oneself :)..we can all have our "thumbly fingered" moments ..:)

Presumably you didnt have scheduled HD backups ..including one before you gave access ..