Hi all. Today at 2:00 in the morning our RaQ4 was hacked. The hack replaced all files named index.* with own hacker content.
We have had this issue a couple of weeks ago. That time the hack afected all index.* files under /home/sites. Now the hack affected all index.* files under / so the Control Panel is affected too. I must note a week ago the server wass rebuilded formm scratch and ALL upgrades were applied. I have chkrootkit and portsentry installed. None of those reported strange activity. I have checked open ports in the server and theres' no strange ports opened. I want to know if somebody has experienced the same issue, and any help will be apreciated.. TIA Pablo ------------ �Ayud� a los chicos navegando! En noviembre, Yahoo! dona un plato de comida por cada usuario que nevegue gratis con Yahoo! Conexi�n. Conectate ya en http://conexion.yahoo.com.ar _______________________________________________ cobalt-security mailing list [EMAIL PROTECTED] http://list.cobalt.com/mailman/listinfo/cobalt-security
