WTF?!?! My sites are hacked !!!

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • lakroze
    Confirmed User
    • Dec 2004
    • 3527

    #1

    WTF?!?! My sites are hacked !!!

    I woke up this morning, and what I can see - all of my sites which are on one hosting (I'll save the hosting name coz I'm not sure if its their fault) are hacked !!! All files from the root directory are deleted and the index file is with some ismamic propaganda !!!!!!

    damn
  • TurboAngel
    H.B.I.C.
    • Jun 2003
    • 30122

    #2
    That sucks.

    Comment

    • Mike Semen
      Confirmed User
      • Dec 2001
      • 2924

      #3
      getting pwned is never good.
      ICQ 1454 81 522 |

      Comment

      • RobV
        Confirmed User
        • Oct 2005
        • 111

        #4
        Originally posted by lakroze
        I woke up this morning, and what I can see - all of my sites which are on one hosting (I'll save the hosting name coz I'm not sure if its their fault) are hacked !!! All files from the root directory are deleted and the index file is with some ismamic propaganda !!!!!!

        damn
        Did you have everything backedup?
        ICQ: 619221

        Comment

        • born2blog
          Confirmed User
          • Sep 2006
          • 1801

          #5
          that's why you always have several backups of your site(s)!!!
          Juicy Ads - Buy & Sell Quality Traffic!!

          Comment

          • Wiggles
            Too lazy to set a custom title
            • May 2004
            • 14423

            #6
            ouch thats rough man, hope you get it resolved quickly.
            no sig

            Comment

            • Elixir
              CHECK MY SIG-AMAZING SITE
              • May 2006
              • 12870

              #7
              oh that's problem..I hope you get it resolved.Good luck !
              SIG FOR SALE


              ICQ 210874419

              Comment

              • elasticatedman
                Confirmed User
                • Jan 2002
                • 120

                #8
                ismamic propaganda is a real problem, these days.
                From onions to pearls

                Comment

                • carol.prime
                  Confirmed User
                  • Jul 2006
                  • 6960

                  #9
                  thats a serious shit, i wonder why islamic propagandas were stuffed in
                  Prime Outsourcing | offshore staffing solutions | manual labor | employee leasing |
                  full time employees starting at $695.00/month =
                  managed and dedicated
                  icq.: 309570461 live chat

                  Comment

                  • bigalownz
                    Confirmed User
                    • Aug 2005
                    • 1657

                    #10
                    got a screen shot of what it says ??
                    $100 free credit for all hosting needs

                    Comment

                    • ro8in
                      Confirmed User
                      • Sep 2006
                      • 1542

                      #11
                      wtf... I had this also stupid islamitic hackers really im sick of them...
                      ------
                      Offcourse its a dude posting here. Probably a fut ugly one too. Fuck still people falling for this 100 year old trick

                      Comment

                      • maxcarter101
                        So Fucking Banned
                        • Oct 2006
                        • 666

                        #12
                        It was legendary lars and his crew. DON'T OPT OUT OF AFF!
                        This is what happens!

                        Comment

                        • greygoose
                          Confirmed User
                          • Apr 2005
                          • 367

                          #13
                          hope it gets resolved soon dude....

                          Comment

                          • Solid_Jake
                            Registered User
                            • Oct 2006
                            • 43

                            #14
                            Originally posted by born2blog
                            that's why you always have several backups of your site(s)!!!
                            How do you backup wordpress blogs there are no root files or htmls to backup?
                            Do you need a good script?
                            My CGIScripts

                            Comment

                            • Love Sex
                              Confirmed User
                              • Nov 2004
                              • 1905

                              #15
                              Originally posted by Solid_Jake
                              How do you backup wordpress blogs there are no root files or htmls to backup?
                              you can download all the files from the server. I forgot which one but There is one file for that has the posts which will save it all.

                              Comment

                              • wdsguy
                                Ryde or Die
                                • Dec 2002
                                • 19568

                                #16
                                Originally posted by Solid_Jake
                                How do you backup wordpress blogs there are no root files or htmls to backup?

                                If the posts are stored in a db you back that up.

                                Comment

                                • LiveDose
                                  Show Yer Tits!
                                  • Feb 2002
                                  • 25792

                                  #17
                                  That sucks man. Talk to your host to make sure your box/account is secure.

                                  Scammer Alert: acer19 acer [email protected] [email protected] Money stolen using PayPal

                                  Comment

                                  • Angry Jew Cat - Banned for Life
                                    (felis madjewicus)
                                    • Jul 2006
                                    • 20368

                                    #18
                                    just be glad they didn't crash a plane into your home...

                                    i had some sites hacked way back, lost everything, i keep backups now..

                                    Comment

                                    • Dirty F
                                      Too lazy to set a custom title
                                      • Jul 2001
                                      • 59204

                                      #19
                                      Allah akbar!

                                      Comment

                                      • Kimo
                                        ...
                                        • Jan 2006
                                        • 11542

                                        #20
                                        hope your host has recent backups
                                        ...

                                        Comment

                                        • King Soil
                                          Confirmed User
                                          • Oct 2006
                                          • 195

                                          #21
                                          I think we are using the same host. 7 of my blogs were hacked by a turkish muslim group spreading propaganda. WTF?? I am trying to reach the host now..

                                          have you gotten your sites back up lakroze?
                                          DUMP YOUR LINKS

                                          Comment

                                          • King Soil
                                            Confirmed User
                                            • Oct 2006
                                            • 195

                                            #22
                                            For those interested I copied the text from my hacked site...



                                            HACKED !

                                            ву || tђє_кєรรк!ภ || Was Here !



                                            We are as Turkish-muslims, for 1000 years following the way of Muhammad (peace be up on him). Our ancestors, Seljuks and Ottomans taught the World what is humanity and tolarance, with their heart and sword. Don�t forget that we are 1,5 billion muslims and we are on the same way�

                                            COME TO ISLAM ! COME TO BEING HUMAN!

                                            Cartoons of Jyllands-Posten aren�t same with other paintings those of muslim artists. These cartoons are insulting our Prophet. It wouldn�t be approved in freedom of expression. This is just cursing� You�ll pay for it!


                                            [ No Porn ]

                                            " We are the guard of reform and republic "



                                            Contact :
                                            Mail & Msn | [email protected] |



                                            Hacked By Cyber-Sabotage.OrG
                                            DUMP YOUR LINKS

                                            Comment

                                            • borked
                                              Totally Borked
                                              • Feb 2005
                                              • 6284

                                              #23
                                              That sucks -
                                              If this is a server-wide hack, you need to start asking questions to your host as to how the fuck this happened... an unpatched server?

                                              at least try and get their domain pulled for flase whois details...

                                              cyber-sabotage.org:
                                              Domain Name:CYBER-SABOTAGE.ORG
                                              Created On:11-May-2006 07:13:50 UTC
                                              Last Updated On:04-Aug-2006 21:39:57 UTC
                                              Expiration Date:11-May-2007 07:13:50 UTC
                                              Sponsoring Registrar:Dotregistrar.com (R114-LROR)
                                              Status:CLIENT TRANSFER PROHIBITED
                                              Registrant ID:1455404-R
                                              Registrant Name:Mustafa Turkbeyi
                                              Registrant Street1:xxxxxxxx
                                              Registrant Street2:
                                              Registrant Street3:
                                              Registrant City:DIYARBAKIR
                                              Registrant State/Province:-
                                              Registrant Postal Code:06310
                                              Registrant Country:TR
                                              Registrant Phone:+90.0000000000
                                              Registrant Phone Ext.:
                                              Registrant FAX:+90.0000000000
                                              Registrant FAX Ext.:
                                              Registrant Email:[email protected]
                                              Admin ID:1455404-A
                                              Admin Name:Mustafa Turkbeyi
                                              Admin Street1:DIYARBAKIR
                                              Admin Street2:
                                              Admin Street3:
                                              Admin City:xxxxxxxx
                                              Admin State/Province:-
                                              Admin Postal Code:06310
                                              Admin Country:TR
                                              Admin Phone:+90.0000000000
                                              Admin Phone Ext.:
                                              Admin FAX:+90.0000000000
                                              Admin FAX Ext.:
                                              Admin Email:[email protected]
                                              Tech ID:1455404-T
                                              Tech Name:Mustafa Turkbeyi
                                              Tech Street1:xxxxxxxx
                                              Tech Street2:
                                              Tech Street3:
                                              Tech City:DIYARBAKIR
                                              Tech State/Province:-
                                              Tech Postal Code:06310
                                              Tech Country:TR
                                              Tech Phone:+90.0000000000
                                              Tech Phone Ext.:
                                              Tech FAX:+90.0000000000
                                              Tech FAX Ext.:
                                              Tech Email:[email protected]
                                              Name Server:NS1.CYBER-SABOTAGE.ORG
                                              Name Server:NS2.CYBER-SABOTAGE.ORG
                                              Name Server:

                                              For coding work - hit me up on andy // borkedcoder // com
                                              (consider figuring out the email as test #1)



                                              All models are wrong, but some are useful. George E.P. Box. p202

                                              Comment

                                              • King Soil
                                                Confirmed User
                                                • Oct 2006
                                                • 195

                                                #24
                                                Ive been hacked before but it was just a script installed on to my pages. This time everything is fucking deleted. lame.
                                                DUMP YOUR LINKS

                                                Comment

                                                • tehHinjew
                                                  Confirmed User
                                                  • Sep 2006
                                                  • 5755

                                                  #25
                                                  im scared i dont want to get hacked LOL
                                                  just to piss them off make a website with the profit mohameds picture
                                                  and say
                                                  BLAME THE islamic propagandas

                                                  Hot Porn Wanna trade? email me at wanker (@) wanknation dot com

                                                  Comment

                                                  • tehHinjew
                                                    Confirmed User
                                                    • Sep 2006
                                                    • 5755

                                                    #26
                                                    [email protected] send him mohamed pictures

                                                    Hot Porn Wanna trade? email me at wanker (@) wanknation dot com

                                                    Comment

                                                    • wyldblyss
                                                      Confirmed User
                                                      • Nov 2003
                                                      • 5779

                                                      #27
                                                      What a nightmare. I hope you get things patched up and back running soon

                                                      Comment

                                                      • alredy
                                                        Spam me with dialer programs
                                                        • Nov 2006
                                                        • 183

                                                        #28
                                                        bad

                                                        hope you'll solve
                                                        __________________
                                                        Do Nothing! Russian teens will bring you success!
                                                        Sales: http://www.koegl-studio.info
                                                        ICQ: 344-915-355
                                                        Always ready to help

                                                        Comment

                                                        • King of Queens
                                                          Confirmed User
                                                          • Aug 2006
                                                          • 1288

                                                          #29
                                                          Originally posted by tehHinjew
                                                          im scared i dont want to get hacked LOL
                                                          just to piss them off make a website with the profit mohameds picture
                                                          and say
                                                          BLAME THE islamic propagandas
                                                          Emails = $3.50 each | girls gone wild | Big Booty | Big Booty Videos

                                                          Comment

                                                          • King Soil
                                                            Confirmed User
                                                            • Oct 2006
                                                            • 195

                                                            #30
                                                            I think im going to start pushing more Arabic porn after this
                                                            DUMP YOUR LINKS

                                                            Comment

                                                            • rounders
                                                              Confirmed User
                                                              • Sep 2003
                                                              • 2931

                                                              #31
                                                              wow that sucks, sorry to hear
                                                              ICQ#: 153923840

                                                              Comment

                                                              • High Plains Drifter
                                                                Confirmed User
                                                                • Jun 2005
                                                                • 2341

                                                                #32
                                                                I got hacked on thanksgiving of all fucking days. Had it restored from backups within the hour but lost about 500 posts (the main site is a message board). It was some turkish political hacker group and, for those interested, it looks like the hole was in cpanel.

                                                                Comment

                                                                • borked
                                                                  Totally Borked
                                                                  • Feb 2005
                                                                  • 6284

                                                                  #33
                                                                  photoshop anyone?

                                                                  (sorry, can't find the original to remove the borkedcoder text)


                                                                  For coding work - hit me up on andy // borkedcoder // com
                                                                  (consider figuring out the email as test #1)



                                                                  All models are wrong, but some are useful. George E.P. Box. p202

                                                                  Comment

                                                                  • bdld
                                                                    $100,000
                                                                    • Dec 2001
                                                                    • 11452

                                                                    #34
                                                                    it happened to me as well, to every site on the host. its not the first time its happened on this host either. i thought it was a wordpress exploit but all my non-blog sites got hit as well.

                                                                    Comment

                                                                    • Star 69
                                                                      Confirmed User
                                                                      • Nov 2005
                                                                      • 8602

                                                                      #35
                                                                      That sucks. Bad news
                                                                      e-mail star69

                                                                      Comment

                                                                      • ro8in
                                                                        Confirmed User
                                                                        • Sep 2006
                                                                        • 1542

                                                                        #36
                                                                        Originally posted by borked
                                                                        photoshop anyone?

                                                                        (sorry, can't find the original to remove the borkedcoder text)

                                                                        hehehehe

                                                                        cheeeeeeeeeeeseeee
                                                                        ------
                                                                        Offcourse its a dude posting here. Probably a fut ugly one too. Fuck still people falling for this 100 year old trick

                                                                        Comment

                                                                        • King Soil
                                                                          Confirmed User
                                                                          • Oct 2006
                                                                          • 195

                                                                          #37
                                                                          Originally posted by bdld
                                                                          it happened to me as well, to every site on the host. its not the first time its happened on this host either. i thought it was a wordpress exploit but all my non-blog sites got hit as well.
                                                                          Interesting. I was told by my host it was due to using wordpress but then you mentioned having non wp sites get it...
                                                                          DUMP YOUR LINKS

                                                                          Comment

                                                                          • borked
                                                                            Totally Borked
                                                                            • Feb 2005
                                                                            • 6284

                                                                            #38
                                                                            Originally posted by King Soil
                                                                            Interesting. I was told by my host it was due to using wordpress but then you mentioned having non wp sites get it...
                                                                            A script hole that gives write access to a website can give (apache) server-wide write access if the server is badly set up...

                                                                            For coding work - hit me up on andy // borkedcoder // com
                                                                            (consider figuring out the email as test #1)



                                                                            All models are wrong, but some are useful. George E.P. Box. p202

                                                                            Comment

                                                                            • King Soil
                                                                              Confirmed User
                                                                              • Oct 2006
                                                                              • 195

                                                                              #39
                                                                              Originally posted by borked
                                                                              That sucks -
                                                                              If this is a server-wide hack, you need to start asking questions to your host as to how the fuck this happened... an unpatched server?

                                                                              at least try and get their domain pulled for flase whois details...

                                                                              cyber-sabotage.org:
                                                                              Domain Name:CYBER-SABOTAGE.ORG
                                                                              Created On:11-May-2006 07:13:50 UTC
                                                                              Last Updated On:04-Aug-2006 21:39:57 UTC
                                                                              Expiration Date:11-May-2007 07:13:50 UTC
                                                                              Sponsoring Registrar:Dotregistrar.com (R114-LROR)
                                                                              Status:CLIENT TRANSFER PROHIBITED
                                                                              Registrant ID:1455404-R
                                                                              Registrant Name:Mustafa Turkbeyi
                                                                              Registrant Street1:xxxxxxxx
                                                                              Registrant Street2:
                                                                              Registrant Street3:
                                                                              Registrant City:DIYARBAKIR
                                                                              Registrant State/Province:-
                                                                              Registrant Postal Code:06310
                                                                              Registrant Country:TR
                                                                              Registrant Phone:+90.0000000000
                                                                              Registrant Phone Ext.:
                                                                              Registrant FAX:+90.0000000000
                                                                              Registrant FAX Ext.:
                                                                              Registrant Email:[email protected]
                                                                              Admin ID:1455404-A
                                                                              Admin Name:Mustafa Turkbeyi
                                                                              Admin Street1:DIYARBAKIR
                                                                              Admin Street2:
                                                                              Admin Street3:
                                                                              Admin City:xxxxxxxx
                                                                              Admin State/Province:-
                                                                              Admin Postal Code:06310
                                                                              Admin Country:TR
                                                                              Admin Phone:+90.0000000000
                                                                              Admin Phone Ext.:
                                                                              Admin FAX:+90.0000000000
                                                                              Admin FAX Ext.:
                                                                              Admin Email:[email protected]
                                                                              Tech ID:1455404-T
                                                                              Tech Name:Mustafa Turkbeyi
                                                                              Tech Street1:xxxxxxxx
                                                                              Tech Street2:
                                                                              Tech Street3:
                                                                              Tech City:DIYARBAKIR
                                                                              Tech State/Province:-
                                                                              Tech Postal Code:06310
                                                                              Tech Country:TR
                                                                              Tech Phone:+90.0000000000
                                                                              Tech Phone Ext.:
                                                                              Tech FAX:+90.0000000000
                                                                              Tech FAX Ext.:
                                                                              Tech Email:[email protected]
                                                                              Name Server:NS1.CYBER-SABOTAGE.ORG
                                                                              Name Server:NS2.CYBER-SABOTAGE.ORG
                                                                              Name Server:
                                                                              How do i go about getting the domain pulled??
                                                                              DUMP YOUR LINKS

                                                                              Comment

                                                                              • Domain Distribution
                                                                                Ask me about negative cash flow
                                                                                • May 2006
                                                                                • 539

                                                                                #40
                                                                                What the Hack?
                                                                                Artifical Intelligence AIM Bot ~ $199.00
                                                                                [email protected]
                                                                                238102273

                                                                                Comment

                                                                                • 4Man
                                                                                  Confirmed User
                                                                                  • Nov 2006
                                                                                  • 3830

                                                                                  #41
                                                                                  Is this bad for the BIZ?

                                                                                  Comment

                                                                                  • shahab6
                                                                                    So Fucking Banned
                                                                                    • Nov 2005
                                                                                    • 1614

                                                                                    #42
                                                                                    that really sucks, thats one thing that we all have to worry about.

                                                                                    Comment

                                                                                    • Miguel T
                                                                                      ♦ Web Developer ♦
                                                                                      • May 2005
                                                                                      • 12473

                                                                                      #43
                                                                                      Good luck getting it back in order bro!

                                                                                      Full Stack Webdeveloper: HTML5/CSS3, jQuery, AJAX, ElevatedX, NATS, MechBunny, Wordpress

                                                                                      Comment

                                                                                      • tehHinjew
                                                                                        Confirmed User
                                                                                        • Sep 2006
                                                                                        • 5755

                                                                                        #44
                                                                                        would your hosting keep a backup for ya?

                                                                                        Hot Porn Wanna trade? email me at wanker (@) wanknation dot com

                                                                                        Comment

                                                                                        • reynold
                                                                                          Too lazy to set a custom title
                                                                                          • Oct 2002
                                                                                          • 51271

                                                                                          #45
                                                                                          That sucks, pal. Same thing with my friend's site.

                                                                                          Comment

                                                                                          • borked
                                                                                            Totally Borked
                                                                                            • Feb 2005
                                                                                            • 6284

                                                                                            #46
                                                                                            Originally posted by King Soil
                                                                                            How do i go about getting the domain pulled??
                                                                                            You write to their registrar ([email protected]) and tell them that the person that own that site is a hacker and that their domain name does not comply with ICANN rules. Specifically, they do not have valid whois details and that you request the domain be suspended and that you will be writing to ICANN regarding the matter if dotregistrar does nothing to enforce ICANN's rules.

                                                                                            For coding work - hit me up on andy // borkedcoder // com
                                                                                            (consider figuring out the email as test #1)



                                                                                            All models are wrong, but some are useful. George E.P. Box. p202

                                                                                            Comment

                                                                                            Working...