That sucks -
If this is a server-wide hack, you need to start asking questions to your host as to how the fuck this happened... an unpatched server?
at least try and get their domain pulled for flase whois details...
cyber-sabotage.org:
Domain Name:CYBER-SABOTAGE.ORG
Created On:11-May-2006 07:13:50 UTC
Last Updated On:04-Aug-2006 21:39:57 UTC
Expiration Date:11-May-2007 07:13:50 UTC
Sponsoring Registrar:Dotregistrar.com (R114-LROR)
Status:CLIENT TRANSFER PROHIBITED
Registrant ID:1455404-R
Registrant Name:Mustafa Turkbeyi
Registrant Street1:xxxxxxxx
Registrant Street2:
Registrant Street3:
Registrant City:DIYARBAKIR
Registrant State/Province:-
Registrant Postal Code:06310
Registrant Country:TR
Registrant Phone:+90.0000000000
Registrant Phone Ext.:
Registrant FAX:+90.0000000000
Registrant FAX Ext.:
Registrant Email:
[email protected]
Admin ID:1455404-A
Admin Name:Mustafa Turkbeyi
Admin Street1:DIYARBAKIR
Admin Street2:
Admin Street3:
Admin City:xxxxxxxx
Admin State/Province:-
Admin Postal Code:06310
Admin Country:TR
Admin Phone:+90.0000000000
Admin Phone Ext.:
Admin FAX:+90.0000000000
Admin FAX Ext.:
Admin Email:
[email protected]
Tech ID:1455404-T
Tech Name:Mustafa Turkbeyi
Tech Street1:xxxxxxxx
Tech Street2:
Tech Street3:
Tech City:DIYARBAKIR
Tech State/Province:-
Tech Postal Code:06310
Tech Country:TR
Tech Phone:+90.0000000000
Tech Phone Ext.:
Tech FAX:+90.0000000000
Tech FAX Ext.:
Tech Email:
[email protected]
Name Server:NS1.CYBER-SABOTAGE.ORG
Name Server:NS2.CYBER-SABOTAGE.ORG
Name Server: