Got Hacked! - GoFuckYourself.com - Adult Webmaster Forum

X

armysmoke

Confirmed User

Join Date: Oct 2013

Posts: 2606
Share

Post
#1

Got Hacked!

04-18-2014, 03:35 AM

Damn, what a way to wake up. All 7 of my WP tube sites got hacked!

I have some stupid Moracan Islamic Union-Mail and a facebook icon on my sites!

I hope my host can recover my sites!
Tags: None
Maqua

E.M.O

Join Date: Jan 2001

Posts: 2031
Share

Post
#2

04-18-2014, 03:47 AM

Ouch, sorry to hear this Brother hope the server has a recent backup and quick recovery!!

T.G.D Two Guys Domains, In business since 1997, EMO Domains, your one stop domain shop, Twitter @maquaed, Keep your stick on the ice!!
Comment
lucas131

¯\_(ツ)_/¯

Join Date: Aug 2004

Posts: 11475
Share

Post
#3

04-18-2014, 03:55 AM

that islamic moroco guys are super boring, cant imagine them hacking and goats around ...
Comment
MrTrollkien

So Fucking Banned

Join Date: Mar 2014

Posts: 2360
Share

Post
#4

04-18-2014, 03:58 AM

Sorry to hear this
Comment
EddyTheDog

Just Doing My Own Thing

Join Date: Jan 2011

Posts: 25433
Share

Post
#5

04-18-2014, 04:01 AM

Where did you get your templates/plug-ins from? - Only download from a 100% trusted source - Lots will inject all sorts of of crap...
Comment
armysmoke

Confirmed User

Join Date: Oct 2013

Posts: 2606
Share

Post
#6

04-18-2014, 04:06 AM

Originally posted by Maqua

Ouch, sorry to hear this Brother hope the server has a recent backup and quick recovery!!

I hope so too!

Originally posted by EddyTheDog

Where did you get your templates/plug-ins from? - Only download from a 100% trusted source - Lots will inject all sorts of of crap...

4 of the sites were wpXtube using their templates and adultsiteskins.com templates. The others were tube ace plugin using adultsiteskins.com templates.

The other plugins were from WP site like counterize, sitemap, etc
Comment
armysmoke

Confirmed User

Join Date: Oct 2013

Posts: 2606
Share

Post
#7

04-18-2014, 04:07 AM

Originally posted by MrTrollkien

Sorry to hear this

Thanks. I hope my host can fix my sites.
Comment
yuu.design

Too lazy to set a custom title

Join Date: Mar 2006

Posts: 25924
Share

Post
#8

04-18-2014, 04:09 AM

damn, hope you have best luck recovering all sites

Beautiful And Usable Web Design Creations For The Adult Industry Since 2003
I'm Yuu, Designer and Content Producer
Paysites - Affiliate Programs - Dating & Cam Sites - Mainstream Projects - Tube Sites - Banners - Wordpress Themes - NATs integration - Landing Pages

Check my Portfolio and Content Production Offers
Comment
Denny

Too lazy to set a custom title

Join Date: Feb 2005

Posts: 17400
Share

Post
#9

04-18-2014, 04:25 AM

Originally posted by armysmoke

Damn, what a way to wake up. All 7 of my WP tube sites got hacked!

I have some stupid Moracan Islamic Union-Mail and a facebook icon on my sites!

I hope my host can recover my sites!

Good luck, keep us posted.
Comment
EddyTheDog

Just Doing My Own Thing

Join Date: Jan 2011

Posts: 25433
Share

Post
#10

04-18-2014, 04:27 AM

Originally posted by armysmoke

I hope so too!

4 of the sites were wpXtube using their templates and adultsiteskins.com templates. The others were tube ace plugin using adultsiteskins.com templates.

The other plugins were from WP site like counterize, sitemap, etc

I assume sites like adultsiteskins are fine - They would have been found out by now if there was an issue - PlugIns from the WP repository should be OK, look at the URLs as you install them - All you can do other than that is make sure you have the latest everything...

Don't use betas' or even RC's on production servers unless you are advised to for a particular reason by someone you trust - Your servers are even more precious than your PC at home or office - Treat them way - That tiny file on your server could be more damaging than a full blown virus on your work network...

Last edited by EddyTheDog; 04-18-2014, 04:28 AM.
Comment
freecartoonporn

Confirmed User

Join Date: Jan 2012

Posts: 7683
Share

Post
#11

04-18-2014, 04:29 AM

sorry to hear. ,
i hope your host has everything backed up . if not you are screwed.

SSD Cloud Server, VPS Server, Simple Cloud Hosting | DigitalOcean
Comment
Bourke

Confirmed User

Join Date: Jul 2013

Posts: 529
Share

Post
#12

04-18-2014, 04:34 AM

If you need a sysadmin/ security guy, hit me up. Mine is good, and he is looking for a couple more contracts.

AdultVoyeur.com.au
Bourke @ AdultVoyeur.com.au
Comment
wizzart

scriptmaster

Join Date: May 2006

Posts: 5246
Share

Post
#13

04-18-2014, 04:39 AM

Every open source script is insecure.

BimboZone
Comment
armysmoke

Confirmed User

Join Date: Oct 2013

Posts: 2606
Share

Post
#14

04-18-2014, 04:40 AM

Originally posted by yuu

damn, hope you have best luck recovering all sites

Thanks!

Originally posted by Denny

Good luck, keep us posted.

Sure will.

Originally posted by EddyTheDog

I assume sites like adultsiteskins are fine - They would have been found out by now if there was an issue - PlugIns from the WP repository should be OK, look at the URLs as you install them - All you can do other than that is make sure you have the latest everything...

Don't use betas' or even RC's on production servers unless you are advised to for a particular reason by someone you trust - Your servers are even more precious than your PC at home or office - Treat them way - That tiny file on your server could be more damaging than a full blown virus on your work network...

Thanks for the advice.

I installed a plugin not to long ago from the Warrior Forum. A developer needed reviewers on their before they listed on the WSO part of the site. This could have been the issue.

Originally posted by freecartoonporn

sorry to hear. ,
i hope your host has everything backed up . if not you are screwed.

I hope so too. If not, I'll just fucking rebuild. I wasn't making a lot of money with them anyway.

Originally posted by Bourke

If you need a sysadmin/ security guy, hit me up. Mine is good, and he is looking for a couple more contracts.

Thanks, I will let you know.
Comment
Klen

Join Date: Aug 2006

Posts: 32235
Share

Post
#15

04-18-2014, 04:40 AM

Hmm,i don't know i am hacked but a site where i have wpxtube deployed when loading,it redirect to domain instead domain.com,basically it remove .com for some reason.And other site on server...it's powered by tubeace lol.But that domain works fine.

Last edited by Klen; 04-18-2014, 04:41 AM.
Comment
armysmoke

Confirmed User

Join Date: Oct 2013

Posts: 2606
Share

Post
#16

04-18-2014, 04:41 AM

Originally posted by KlenTelaris

Hmm,i don't know i am hacked but a site where i have wpxtube deployed when loading,it redirect to domain instead domain.com,basically it remove .com for some reason.

I hope you didn't get hacked too!
Comment
romeo22

你自己去他媽的

Join Date: Mar 2008

Posts: 23350
Share

Post
#17

04-18-2014, 04:52 AM

damn that's really bad start of your weekend
Comment
Klen

Join Date: Aug 2006

Posts: 32235
Share

Post
#18

04-18-2014, 04:52 AM

Originally posted by armysmoke

I hope you didn't get hacked too!

Dont care,that is why i holding on special vps sites powered by not-so-secure scripts.Ah never mind it seems i added bad redirect into httpd settings which caused that problem.But i will ditch that script for every case.

Last edited by Klen; 04-18-2014, 05:00 AM. Reason: Update
Comment
phasic

Confirmed User

Join Date: Jul 2005

Posts: 2104
Share

Post
#19

04-18-2014, 05:30 AM

Armysmoke shoot me an email david at xxxc.am / it'll take me 5 min to find and fix the hack.

Brief revisit. (mic drop)
Comment
MrTrollkien

So Fucking Banned

Join Date: Mar 2014

Posts: 2360
Share

Post
#20

04-18-2014, 05:32 AM

Originally posted by phasic

Armysmoke shoot me an email david at xxxc.am / it'll take me 5 min to find and fix the hack.
Comment
EddyTheDog

Just Doing My Own Thing

Join Date: Jan 2011

Posts: 25433
Share

Post
#21

04-18-2014, 05:39 AM

Originally posted by phasic

Armysmoke shoot me an email david at xxxc.am / it'll take me 5 min to find and fix the hack.

It sounds like you know the problem - Would you care to share?..
Comment
armysmoke

Confirmed User

Join Date: Oct 2013

Posts: 2606
Share

Post
#22

04-18-2014, 05:45 AM

Originally posted by phasic

Armysmoke shoot me an email david at xxxc.am / it'll take me 5 min to find and fix the hack.

All the files are gone except for an index.php and an arp.php.

I have no backups on my computer (I know, I'm an idiot). Hoping that my hosting company has a backup.
Comment
armysmoke

Confirmed User

Join Date: Oct 2013

Posts: 2606
Share

Post
#23

04-18-2014, 05:45 AM

Got a message from my hosting company just now.

They are looking into it.
Comment
Maqua

E.M.O

Join Date: Jan 2001

Posts: 2031
Share

Post
#24

04-18-2014, 06:32 AM

lets just hope that your host was doing daily or even at minimum weekly backups, at least that will give you something back, then update everything and even see if your host has the logs to see what, when and how it happened

T.G.D Two Guys Domains, In business since 1997, EMO Domains, your one stop domain shop, Twitter @maquaed, Keep your stick on the ice!!
Comment
Klen

Join Date: Aug 2006

Posts: 32235
Share

Post
#25

04-18-2014, 06:57 AM

Originally posted by armysmoke

All the files are gone except for an index.php and an arp.php.

I have no backups on my computer (I know, I'm an idiot). Hoping that my hosting company has a backup.

You are not idiot,you playing hardcore mode.
Comment
Lars_Cash

Confirmed User

Join Date: May 2013

Posts: 135
Share

Post
#26

04-18-2014, 08:53 AM

damn, that sucks. I cross fingers regarding the backup!1

Stop wasting your traffic - get wasted with us...
Comment
Mediamix

Dutch Webmaster!

Join Date: Sep 2013

Posts: 3228
Share

Post
#27

04-18-2014, 08:56 AM

I hope it gets solved..

Sig too big
Comment
SekobA

Too lazy to set a custom title

Join Date: Oct 2008

Posts: 12174
Share

Post
#28

04-18-2014, 09:00 AM

hope this will sort out very soon

Best Affiliate Program Available
Start Promoting 25% REV-SHARE
Comment
armysmoke

Confirmed User

Join Date: Oct 2013

Posts: 2606
Share

Post
#29

04-18-2014, 09:15 AM

Originally posted by Maqua

lets just hope that your host was doing daily or even at minimum weekly backups, at least that will give you something back, then update everything and even see if your host has the logs to see what, when and how it happened

The host is loading backups from 5 April. Not to bad I guess. It could have been worse.

Originally posted by Lars_Cash

damn, that sucks. I cross fingers regarding the backup!1

Thanks, it should be getting fixed now.

Originally posted by Mediamix

I hope it gets solved..

Thanks!

Originally posted by SekobA

hope this will sort out very soon

Thanks!
Comment
brassmonkey

Pay It Forward

Join Date: Sep 2005

Posts: 77397
Share

Post
#30

04-18-2014, 09:21 AM

switch to tube X

im pushing some 10k+ sites on it 0% bought traffic

TRUMP 2026 KEKAW!!! - The Laken Riley Act Is Law!
DACA ENDED - SUPPORT AZ HCR 2060 52R - email: brassballz-at-techie.com
Comment
lezinterracial

Confirmed User

Join Date: Jul 2012

Posts: 3117
Share

Post
#31

04-18-2014, 09:23 AM

I rename the wp-login.php on my wordpress sites and rename it back when I need to login. I still see bots trying to access it. Do you protect the wp-login.php file?

Thanks for the notice. I am keeping an eye on my wpxtube site.

Also think about switching to hostgator. Nobody will be able to access your sites.

Live Sex Shows
Comment
phasic

Confirmed User

Join Date: Jul 2005

Posts: 2104
Share

Post
#32

04-18-2014, 10:15 AM

Still trying to fix it eh? Any luck?

It sounds like you know the problem - Would you care to share?..

Not really, but I do abuse work for a server administration company. Deal with this kind of stuff often.

Brief revisit. (mic drop)
Comment
JuicyBunny

So Fucking Banned

Join Date: Jun 2010

Posts: 2145
Share

Post
#33

04-18-2014, 10:22 AM

rotsa ruck
Comment
AsianDivaGirlsWebDude

Purveyor, Fine Asian Porn

Join Date: Jul 2004

Posts: 38323
Share

Post
#34

04-18-2014, 10:37 AM

Never heard of them...their focus appears to be grievances with non-Islamic, mostly African governments (Angola, Mozambique, South Africa, etc, although I saw that they hit the Italian government too).

"We do not want muscle-flexing. Just want to get our message across the world to discover the truth."

The message left by the team reads. " Yes, the fact that should be explored invite you to show filter this video to discover the truth for yourself. #THE TRUTH WILL PREVAIL".

In addition to the above statement the defaced website was also playing a Youtube video, depicting The stark reality about the Prophet Muhammad in the Bible.

- See more at: http://www.ehackingnews.com/2014/02/....SL7svFXQ.dpuf

Religious kooks...

ADG

Asian Diva Girls - Exclusive Photos and Videos

Asian Diva Girls Affiliate Program (50% ccBill Revshare)
Comment
freecartoonporn

Confirmed User

Join Date: Jan 2012

Posts: 7683
Share

Post
#35

04-18-2014, 10:58 AM

Originally posted by lezinterracial

I rename the wp-login.php on my wordpress sites and rename it back when I need to login. I still see bots trying to access it. Do you protect the wp-login.php file?

Thanks for the notice. I am keeping an eye on my wpxtube site.

Also think about switching to hostgator. Nobody will be able to access your sites.

its not always the wp-login.php used to gain access to your wp.
there are mo re than that, like
rfi ,rce vulnerability

*make sure wp + plugins + themes are up to date
*and make sure to get them from repuatble sources /from anthers .

harden the os, and you can just chmod the wp-login file with 000 no need to rename eveytime.

SSD Cloud Server, VPS Server, Simple Cloud Hosting | DigitalOcean
Comment
CPA-Rush

small trip to underworld

Join Date: Mar 2012

Posts: 4927
Share

Post
#36

04-18-2014, 12:46 PM

hope u have no virus inside ur web hosting account

good luck cleaning the house

automatic exchange - paxum , bitcoin,pm, payza

. daizzzy signbucks caution will black-hat black-hat your traffic

ignored forever :zuzana designs

{firefox- remove some posters |skills#1|skills#2| email >[email protected] } ツ
Comment
lezinterracial

Confirmed User

Join Date: Jul 2012

Posts: 3117
Share

Post
#37

04-18-2014, 03:21 PM

Originally posted by freecartoonporn

its not always the wp-login.php used to gain access to your wp.
there are mo re than that, like
rfi ,rce vulnerability

*make sure wp + plugins + themes are up to date
*and make sure to get them from repuatble sources /from anthers .

harden the os, and you can just chmod the wp-login file with 000 no need to rename eveytime.

Good tip. Thanks!

Live Sex Shows
Comment
CPA-Rush

small trip to underworld

Join Date: Mar 2012

Posts: 4927
Share

Post
#38

04-18-2014, 03:50 PM

Originally posted by lucas131

that islamic moroco guys are super boring, cant imagine them hacking and goats around ...

hacking doesn’t require that much unless are super hacker .. u may need at least 10 yrs to become one

i was in HF for not a short time but i didn’t like how they treat members / very disrespectful

Last edited by CPA-Rush; 04-18-2014, 03:51 PM.

automatic exchange - paxum , bitcoin,pm, payza

. daizzzy signbucks caution will black-hat black-hat your traffic

ignored forever :zuzana designs

{firefox- remove some posters |skills#1|skills#2| email >[email protected] } ツ
Comment
elliso

Its All About Girls &SEX

Join Date: Dec 2011

Posts: 1061
Share

Post
#39

04-18-2014, 04:40 PM

Maroccans are Pro in hacking :-) just watch Out
usualy they attack france.
but they are really Geunis

ICQ : Number 690911541
Comment
CPA-Rush

small trip to underworld

Join Date: Mar 2012

Posts: 4927
Share

Post
#40

04-18-2014, 04:53 PM

moroccan alert ^^

automatic exchange - paxum , bitcoin,pm, payza

. daizzzy signbucks caution will black-hat black-hat your traffic

ignored forever :zuzana designs

{firefox- remove some posters |skills#1|skills#2| email >[email protected] } ツ
Comment
armysmoke

Confirmed User

Join Date: Oct 2013

Posts: 2606
Share

Post
#41

04-18-2014, 05:03 PM

Well, all but two of my sites are up. The two are still missing images.

The hosting company said that my updates were out of date.

I call BS on that. They had a backup that was 2 weeks old and WP had 4 updates in the past two weeks. They determined that my shit was not up to date based on their backup. Fucktards! They also threatened suspension if I did not update my shit.

Someone refer me to a good shared hosting account. Reseller accounts are fine. I need 50G of space and over 200G bandwidth per month.

I'm done with these fucktards that are telling me my shit is not up to date based on their backup that's two weeks old.
Comment
Juicy D. Links

So Fucking Banned

Join Date: Apr 2001

Posts: 122992
Share

Post
#42

04-18-2014, 05:18 PM

might have been that achmed guy that posts here... you ave any beef with him?
Comment
Achmed

Confirmed User

Join Date: Jun 2007

Posts: 1447
Share

Post
#43

04-18-2014, 05:20 PM

Originally posted by armysmoke

Damn, what a way to wake up. All 7 of my WP tube sites got hacked!

I have some stupid Moracan Islamic Union-Mail and a facebook icon on my sites!

I hope my host can recover my sites!

Originally posted by armysmoke

I hope so too!

4 of the sites were wpXtube using their templates and adultsiteskins.com templates. The others were tube ace plugin using adultsiteskins.com templates.

The other plugins were from WP site like counterize, sitemap, etc

Originally posted by armysmoke

Thanks. I hope my host can fix my sites.

Morocco 4 lifezzzzzzzzzzzzzzzzz

Achmed Oil - Achmed Holdings - Achmed Guns n Ammo
Ceo of all companies
[email protected]
[email protected]
آخرون من نفس المجموعة، وهم عبدالرؤوف الشايب
وسيد شرف الستري لاعتداء قوات الأمن أثناء تواجدهم في المطار، ويعتبر البعض ذلك
تصفية للحسابات قامت به
http://tweeter.com/achmedholdings
Comment
Achmed

Confirmed User

Join Date: Jun 2007

Posts: 1447
Share

Post
#44

04-18-2014, 05:21 PM

Originally posted by armysmoke

I'm a fucktard

yes yes you are indeed , please pay ransom and we fix sites

Achmed Oil - Achmed Holdings - Achmed Guns n Ammo
Ceo of all companies
[email protected]
[email protected]
آخرون من نفس المجموعة، وهم عبدالرؤوف الشايب
وسيد شرف الستري لاعتداء قوات الأمن أثناء تواجدهم في المطار، ويعتبر البعض ذلك
تصفية للحسابات قامت به
http://tweeter.com/achmedholdings
Comment
armysmoke

Confirmed User

Join Date: Oct 2013

Posts: 2606
Share

Post
#45

04-18-2014, 05:21 PM

Originally posted by Juicy D. Links

might have been that achmed guy that posts here... you ave any beef with him?

No beef with him.
Comment
armysmoke

Confirmed User

Join Date: Oct 2013

Posts: 2606
Share

Post
#46

04-18-2014, 05:22 PM

Originally posted by Achmed

yes yes you are indeed , please pay ransom and we fix sites

Did you do this?
Comment
Achmed

Confirmed User

Join Date: Jun 2007

Posts: 1447
Share

Post
#47

04-18-2014, 05:22 PM

Originally posted by armysmoke

Damn, what a way to wake up. All 7 of my WP tube sites got hacked!

I have some stupid Moracan Islamic Union-Mail and a facebook icon on my sites!

I hope my host can recover my sites!

you are racialist racist

Achmed Oil - Achmed Holdings - Achmed Guns n Ammo
Ceo of all companies
[email protected]
[email protected]
آخرون من نفس المجموعة، وهم عبدالرؤوف الشايب
وسيد شرف الستري لاعتداء قوات الأمن أثناء تواجدهم في المطار، ويعتبر البعض ذلك
تصفية للحسابات قامت به
http://tweeter.com/achmedholdings
Comment
Achmed

Confirmed User

Join Date: Jun 2007

Posts: 1447
Share

Post
#48

04-18-2014, 05:23 PM

Originally posted by armysmoke

Did you do this?

what you say to me? You make accusations? Where proofs fuckface?

Achmed Oil - Achmed Holdings - Achmed Guns n Ammo
Ceo of all companies
[email protected]
[email protected]
آخرون من نفس المجموعة، وهم عبدالرؤوف الشايب
وسيد شرف الستري لاعتداء قوات الأمن أثناء تواجدهم في المطار، ويعتبر البعض ذلك
تصفية للحسابات قامت به
http://tweeter.com/achmedholdings
Comment
Achmed

Confirmed User

Join Date: Jun 2007

Posts: 1447
Share

Post
#49

04-18-2014, 05:24 PM

Originally posted by armysmoke

No beef with him.

you fucking with wrong person you racialist assfuck

Achmed Oil - Achmed Holdings - Achmed Guns n Ammo
Ceo of all companies
[email protected]
[email protected]
آخرون من نفس المجموعة، وهم عبدالرؤوف الشايب
وسيد شرف الستري لاعتداء قوات الأمن أثناء تواجدهم في المطار، ويعتبر البعض ذلك
تصفية للحسابات قامت به
http://tweeter.com/achmedholdings
Comment
armysmoke

Confirmed User

Join Date: Oct 2013

Posts: 2606
Share

Post
#50

04-18-2014, 05:26 PM

Originally posted by Achmed

you fucking with wrong person you racialist assfuck

Fuck you!
Comment

Previous 1 2 template Next

Working...