Friends.
I desperately need a hacker-security angel. I hope someone out there can help me solve this problem, because it's seriously ruining my life:
LAVoice.org has been hacked now four times in two weeks. The first three times were simple defacements of the home page.
This one is more pernicious and unstoppable (the same operators, by their signature) - they are running a script that overwrites every single index.* file in my directory. This means LAVoice, my home page, my portfolio, my other little blog - and every single channel-level page at FactoidLabs. Go on - try clicking on one of the links to the right.
At least my resume is still visible - though I'm sure that could change at any second.
The only bright spot in all this was that I backed everything up just this morning.
I cannot kill whatever process is causing this. I killed every single process on the server, and the hacked page keeps coming through.
I cannot restore any of my index pages. They are overwritten by the snotty little hacker message.
Changing passwords has no effect. I have changed every single one.
My hosting company (DreamHost) has insisted this is somehow my fault - that old server software in my directories contained a vulnerability. I upgraded Wordpress to 1.5, and was in the process of upgrading PostNuke to .750 when this latest attack hit.
I Googled the phrase "spykids ownz you" and found this distressing thread: http://www.bazon.net/mishoo/home.epl? NEWS_ID=1106 which suggests "spykids" are a group of bored Brazilian teens who have been doing this - a lot - just "for the boast."
The thread suggests that the hackers are exploiting a vulnerability in awstats - which I am not running. This suggests to me that my host somehow let them in. I have emailed an urgent ticket to them, but expect the same diffident brushoff.
PLEASE anyone. A little help. ()
I am comfortable executing unix commands, though I am far from expert, and can give you full access to whatever you need.
But since I am jobhunting full-time right now, and these sites are the ONLY THING I HAVE TO SHOW TO POTENTIAL EMPLOYERS I am frustrated and anxious and getting more pissed by the second.
I could really use a hand here.
Graying rapidly,
-- Mack
()
I desperately need a hacker-security angel. I hope someone out there can help me solve this problem, because it's seriously ruining my life:
LAVoice.org has been hacked now four times in two weeks. The first three times were simple defacements of the home page.
This one is more pernicious and unstoppable (the same operators, by their signature) - they are running a script that overwrites every single index.* file in my directory. This means LAVoice, my home page, my portfolio, my other little blog - and every single channel-level page at FactoidLabs. Go on - try clicking on one of the links to the right.
At least my resume is still visible - though I'm sure that could change at any second.
The only bright spot in all this was that I backed everything up just this morning.
I cannot kill whatever process is causing this. I killed every single process on the server, and the hacked page keeps coming through.
I cannot restore any of my index pages. They are overwritten by the snotty little hacker message.
Changing passwords has no effect. I have changed every single one.
My hosting company (DreamHost) has insisted this is somehow my fault - that old server software in my directories contained a vulnerability. I upgraded Wordpress to 1.5, and was in the process of upgrading PostNuke to .750 when this latest attack hit.
I Googled the phrase "spykids ownz you" and found this distressing thread: http://www.bazon.net/mishoo/home.epl? NEWS_ID=1106 which suggests "spykids" are a group of bored Brazilian teens who have been doing this - a lot - just "for the boast."
The thread suggests that the hackers are exploiting a vulnerability in awstats - which I am not running. This suggests to me that my host somehow let them in. I have emailed an urgent ticket to them, but expect the same diffident brushoff.
PLEASE anyone. A little help. ()
I am comfortable executing unix commands, though I am far from expert, and can give you full access to whatever you need.
But since I am jobhunting full-time right now, and these sites are the ONLY THING I HAVE TO SHOW TO POTENTIAL EMPLOYERS I am frustrated and anxious and getting more pissed by the second.
I could really use a hand here.
Graying rapidly,
-- Mack
()