Forum Moderators: phranque

Message Too Old, No Replies

My site has been hacked

What shall I do?

         

kodaks

12:14 am on May 8, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



When I go to the main part of my site, I get the following message:
Rebellious Fingers Defacement Crew - <--email address removed--> - Amigos DaemonOptik rlz

Has anyone ever gotten hacked with this message before? What should I do? I have already contacted my host, and am awaiting a response... Thanks!

Added:
I did a search on Google for part of this error message and I have found that other sites have gotten hacked (including CNET Asia before) like this too. Does anyone know if this is a random thing, or are specific sites/categories getting "defaced".

txbakers

12:43 am on May 8, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



they hack your FTP password and leave a message.

Just change your password and change it to something harder to crack.

kodaks

1:40 am on May 8, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Thanks! Is this a well known hack group/person?

keyplyr

7:55 am on May 8, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



Is this a well known hack group/person?

More so now that you've mentioned them at WW. One of the motivations of hackers is recognition and the more their nic is mentioned, the more status they get from their peers.

Your hosting account name can be easily be found. Disabled all your usernames/passwords that use your account name, and as txbakers suggested, change them you something difficult to crack.

If you use PHP discussion forums or a CMS, go to the company website and download/install the latest version. These types of programs are known to be exploited on a regular basis.

kodaks

1:27 pm on May 8, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Thanks!