I've been hacked!!! Advice please...
Discussion
My homepage appears to have been hacked by "Breakerz" whoever they may be...
What's the score? It's a personal site & is used for a few family photos.
(It's hosted by a well known & recommended sponsor of some forums
)
What's the score? Can I just change the page back with no ill effects?
This is a first for me!! (www.mapey.com if you want to have a look)
Thanks,
Chris
What's the score? It's a personal site & is used for a few family photos.
(It's hosted by a well known & recommended sponsor of some forums
) What's the score? Can I just change the page back with no ill effects?
This is a first for me!! (www.mapey.com if you want to have a look)
Thanks,
Chris
agent006 said:
Can I just change the page back with no ill effects?
I'd then be having a word with my hosting company to find out what they'll be changing to stop it happening again.
Alas there is only so much a Host can do.. you can provide new versions of products but you cant force users to upgrade to them.
A properly secured system will isolate the infection to only that users account, and worst case you just wipe the account, restore from the last nights backup and remove the offending software.
J
chris.mapey said:
Alas there is only so much a Host can do.. you can provide new versions of products but you cant force users to upgrade to them.
J
Is there something I need to do to my account then?
Nopers, I've done it for you.
I've mailed you details and what to look out for in the future.
J
JamieBeeston said:
A properly secured system will isolate the infection to only that users account, and worst case you just wipe the account, restore from the last nights backup and remove the offending software.
J
Surely a properly secured system would not be accessible to this extent. I assume that all my hosting packages, R1 and elsewhere, are kept up to date patch-wise and firewalled up to their eyeballs unless i'm explicitly informed otherwise.
chris.mapey said:
Stunning service from Register 1 again. 
I simply cannot think of another company where the MD would respond to a comment such as mine, personally, send a PM, then raise a support request.
All at 11.00 pm on a Friday night...
Many, many thanks Jamie (& all at Register1)
Chris
I am the TD not MD, but it's all about service. If it wasnt me it would've been my support chaps anyway
J
agent006 said:
A properly secured system will isolate the infection to only that users account, and worst case you just wipe the account, restore from the last nights backup and remove the offending software.
J
Surely a properly secured system would not be accessible to this extent. I assume that all my hosting packages, R1 and elsewhere, are kept up to date patch-wise and firewalled up to their eyeballs unless I'm explicitly informed otherwise.
The system is only as secure as whatever product a user chooses to install.
There is nothing I can do to stop you, or any other user installing an old / insecure version of any product they wish, afterall, it is their hosting package.
What I can and DO ensure though, is that the WORST that can happen is ONLY your account is affected.
phpsuexec is enabled on the server, this means that php scripts run with the privilege and ownership level of your account user (this allows for nifty features / more tools for the developer) this also means that if any script has a flaw / is dodgy, that the offender can then overwrite any file YOU own. They cant touch anyone elses, but then can rewrite yours.
Now, we keep all of our products up-to-date as new versions are released (but remember, a but needs to be FOUND before it can be patched, and typically it's found by the hackers), however I cant force an update on all users, as, for example, you might have a significant amount of customised additions to your phpBB install.. If I was to unilaterally replace your install with the latest and greatest new version, all your hardwork and modifications would be lost..
So, I do the next best thing, I remove the ability to install the old one, I only let you install the new one, and I give you the option to upgrade to the new one at your convenience so that users can upgrade at their convenience to enable them to better manage any transitional issues.
Our servers are heavily firewalled, extremely well secured and protected with extremely thorough backup regimes in place.
I'll happily entertain any more security related questions, but off forum (public discussion of security policies is not clever!
) J
A bit OT. Jamie, if I needed a backup doing, is it a case of simply getting on to you to "roll" it back?
The reason I ask, is because it would save me a real headache backing up something that changes almost by the minute. Whatever I backup, I'm always going to lose some content when I restore. I'm on about the database obviously.
The reason I ask, is because it would save me a real headache backing up something that changes almost by the minute. Whatever I backup, I'm always going to lose some content when I restore. I'm on about the database obviously.
philthy said:
A bit OT. Jamie, if I needed a backup doing, is it a case of simply getting on to you to "roll" it back?
The reason I ask, is because it would save me a real headache backing up something that changes almost by the minute. Whatever I backup, I'm always going to lose some content when I restore. I'm on about the database obviously.
Hi, We backup all the accounts daily, if you want to restore a site just raise a support ticket and my support chaps will look into it for you.
Drop me a mail if you have any queries.
J
Gassing Station | Computers, Gadgets & Stuff | Top of Page | What's New | My Stuff