| Server Got Hacked |
[eluser]cahva[/eluser]
If the file's permission was 664, it probably was hacked using remote connection through FTP, SFTP or SSH. If you checked when was the file modified, it would be easy to check ftp etc. logs how it was modified. If you have 2 sites already hacked and you use FTP, you or someone else using FTP to the sites may have infected machines as this sounds a lot like Gumblar. It is still spreading as one of our customer had that just 2 weeks ago. |
| Messages In This Thread |
|
Server Got Hacked - by El Forum - 10-08-2009, 02:40 PM
Server Got Hacked - by El Forum - 10-08-2009, 03:56 PM
Server Got Hacked - by El Forum - 10-08-2009, 08:55 PM
Server Got Hacked - by El Forum - 10-09-2009, 05:02 AM
Server Got Hacked - by El Forum - 11-07-2009, 08:55 AM
Server Got Hacked - by El Forum - 11-08-2009, 11:19 AM
|
