At 06:29 AM 6/22/2007, Darren Moore wrote:
>I just visited www.techservinc.com and it looks
>like the site has been hacked.

Confirmed. The site has been hacked. Page displays skull and crossbones and
HaCkeD bY DJ_EnEs | Worldhackerz.Net |

The image is sourced at

http://www.resimekle.gen.tr/imagehosting/images/7Eg23700.jpg

And there is indication that the hacker is Turkish. Techserv site 
admin could look at the logs and find source IP for the hack, 
presumably. Unless they are very good.

My own domain was just hacked, but more subtly, it took me some 
months to find out. My daughter called me and told me that Google was 
flagging lomaxdesign.com as having a link to dangerous code. Say what?

So I looked, and, indeed, several things were going on. There was 
nothing visible or linked from the main page, but some images and a 
redirect had been placed in public_html, and I was getting quite few 
hits for those images and the link, and also what looked like a 
server script was in another directory. Hacker in the Czech Republic, 
from fpt logs, and the redirect to a site selling drugs in Asia. They 
had the password for the domain, it appears, they were using ftp to 
upload the files. I deleted them and they were back next day. And the 
server password file was locked, took a day to even change the password....





 
____________________________________________________________
You are subscribed to the PEDA discussion forum

To Post messages:
mailto:[email protected]

Unsubscribe and Other Options:
http://techservinc.com/mailman/listinfo/peda_techservinc.com

Browse or Search Old Archives (2001-2004):
http://www.mail-archive.com/[EMAIL PROTECTED]
 
Browse or Search Current Archives (2004-Current):
http://www.mail-archive.com/[email protected]

Reply via email to