Forum Moderators: phranque

Message Too Old, No Replies

SOS...box hacked, need Professional Security Service ASAP

         

dogboy

2:22 pm on Mar 9, 2001 (gmt 0)

10+ Year Member



I have a Cobalt RAQ4r that got hit... apparently thru port 53.... they overwhelmed the BIND server (?) and the box is now compromised and the concensus is they will be back.

Cobal Support identified it as a hack and said they can't recommend anything other than a clean OS install, although the guy said I could try and contact a Professional Security Service and they might be able to fix the box.

There is quite a bit of software on that box plus 30 sites or so.... to take it down and put it back together will take time and money since I'm an idiot. I thought it might cost just as much, but be quicker if I could get someone in that had dealt with that hack before of a RAQ and could fix it without issue.

Anyone know of a hardcore Professional Security Service? No offense, but whoever it is *HAS* to deal with hacking. (I know there are a bunch of brilliant people that hang out here that might offer to help, or knows someone, but I need to kill this thing quickly and absolutely without failure. and these things are tricky)

Any one know of anything? any opinions?

NFFC

2:27 pm on Mar 9, 2001 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



>Any one know of anything? any opinions?

Did they use the exploit to max out the CPU?

dogboy

3:12 pm on Mar 9, 2001 (gmt 0)

10+ Year Member



NFFC, no idea what was really done.... supposedly the virtual sites might be fine so they can be restored.

Anyway, looks like I will have to do the reinstall.... talked to cobalt again... they said they won't touch it and can't recommend anyone. The guy on the phone said if he did touch it, it would cost $450 an hour for 8-16 hours... but he wont do it. He said if the damage was over $10k to call the FBI and some group at Carnegie Mellon who are supposedly the bomb.

anyway.... thanks

Edited by: dogboy

Mike_Mackin

3:48 pm on Mar 9, 2001 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



:(
check your sticky mail