Myti.info is hacking sites and redirecting traffic.. - GoFuckYourself.com

Quickdraw · 03-22-2007, 10:31 AM

From another board--

Quote:

Someone hacked my account and inserted these lines:
RewriteEngine On
RewriteCond %{HTTP_REFERER} !=""
RewriteRule .* http:// [intentionalspace]myti.info/disel/disel.htm
into my .htaccess files.
If it was a site that didn't use .htaccess, they inserted one with those three lines.

This hack is promoting DieselAction. No response from their contact form as of yet, but I'm pretty sure they frequent this board.

Anyway, check your sites. From what I understand they probably got in through WP.

Kevsh · 03-22-2007, 10:33 AM

Happened to me yesterday, and I had a WP site in my account. Same method: Appending that .htaccess directive at the bottom of all my site's files.

Fucker.

u-Bob · 03-22-2007, 10:36 AM

myti.info: registrar: estdomains (the registrar of choice for scammers, cheaters and thieves) no surprise there.
registrant Street1:Ukraine, Kiev. also, no surprise there.

pornguy · 03-22-2007, 10:57 AM

got me on one of them, but I will be dammed if I can figure out where it was sending stuff.

Quickdraw · 03-22-2007, 11:43 AM

I'm a little surprised that so many have been hit. Anyone have a contact at dieselaction that might be able to take care of this?

TeenCat · 03-22-2007, 11:56 AM

i think if here is posted dangerous link there have to be some warning. with security i see on many people here is this thread dangerous. owner of myti know how to get into your servers, now he have many ips of not so secure webmasters so his playground can be much more interesting now ...

Quickdraw · 03-22-2007, 12:03 PM

What are you on about? There are no links in this thread and the thread is clearly about hacking. Most on this board are able to understand that they venture at their own risk, especially when copying and pasting potential links to hacker sites..

P.S. the ip of an ISP isn't going to help them hack your servers..

TeenCat · 03-22-2007, 12:48 PM

Quote:

Originally Posted by Quickdraw

P.S. the ip of an ISP isn't going to help them hack your servers..

servers are secure until someone isnt cracking your puter and getting all datas cause he know your ip and you are not secure enough, am i right?

RawAlex · 03-22-2007, 12:49 PM

The risk with WP is that if you change the permalink structure, it suggests that it could do the work if you gave the program write access to your htaccess file.

Many people open it up completely 777.

The rest is, well, child's play.

Quickdraw · 03-22-2007, 12:57 PM

Quote:

Originally Posted by TeenCat

servers are secure until someone isnt cracking your puter and getting all datas cause he know your ip and you are not secure enough, am i right?

Well, as that may be possible, it would be just as easy to post a pic on a webmaster board and get webmaster ip's that way, or any number of other ways.
If you don't feel secure in going to that site, well, then don't.

TeenCat · 03-22-2007, 01:05 PM

Quote:

Originally Posted by Quickdraw

If you don't feel secure in going to that site, well, then don't.

you know i know but not everyone know, and thats what will be nice to see near every dangerous link

Quickdraw · 03-22-2007, 01:22 PM

Quote:

Originally Posted by TeenCat

you know i know but not everyone know, and thats what will be nice to see near every dangerous link

Don't get me wrong, I understand your concerns, but you are barking in the wrong thread considering there are NO actual links in a thread that contains the word 'hacking' right in the title. I doubt too many folks will have trouble.

Between having no links in the thread, and the thread title being about hacked websites, if someone has a problem, then...
Let's put it this way.
If brains were gas, they wouldn't have enough to fill a piss ants motorcycle to cross a nickel... or something like that

03-22-2007, 10:57 AM	#4
pornguy Too lazy to set a custom title Industry Role: Join Date: Mar 2003 Location: Homeless Posts: 62,911	got me on one of them, but I will be dammed if I can figure out where it was sending stuff. __________________ PornGuy skype me pornguy_epic AmateurDough The Hottes Shemales online! TChicks.com \| Angeles Cid \| Mariana Cordoba \| MAILERS WELCOME!

03-22-2007, 11:56 AM	#6
TeenCat Too lazy to set a koala Industry Role: Join Date: Jan 2007 Location: CZ/EU forever! Posts: 16,139	i think if here is posted dangerous link there have to be some warning. with security i see on many people here is this thread dangerous. owner of myti know how to get into your servers, now he have many ips of not so secure webmasters so his playground can be much more interesting now ... __________________ 6bot / Coming again very soon! Svit Zlin Radio 24/7!

03-22-2007, 10:33 AM	#2
Kevsh Confirmed User Join Date: Dec 2004 Location: TO Posts: 8,619	Happened to me yesterday, and I had a WP site in my account. Same method: Appending that .htaccess directive at the bottom of all my site's files. Fucker.

03-22-2007, 10:36 AM	#3
u-Bob there's no $$$ in porn Industry Role: Join Date: Jul 2005 Location: icq: 195./568.-230 (btw: not getting offline msgs) Posts: 33,063	myti.info: registrar: estdomains (the registrar of choice for scammers, cheaters and thieves) no surprise there. registrant Street1:Ukraine, Kiev. also, no surprise there.

03-22-2007, 11:43 AM	#5
Quickdraw Confirmed User Join Date: Mar 2004 Location: → → → Posts: 1,717	I'm a little surprised that so many have been hit. Anyone have a contact at dieselaction that might be able to take care of this?

03-22-2007, 12:03 PM	#7
Quickdraw Confirmed User Join Date: Mar 2004 Location: → → → Posts: 1,717	What are you on about? There are no links in this thread and the thread is clearly about hacking. Most on this board are able to understand that they venture at their own risk, especially when copying and pasting potential links to hacker sites.. P.S. the ip of an ISP isn't going to help them hack your servers..

03-22-2007, 12:49 PM	#9
RawAlex So Fucking Banned Join Date: Oct 2003 Location: In a house. Posts: 9,465	The risk with WP is that if you change the permalink structure, it suggests that it could do the work if you gave the program write access to your htaccess file. Many people open it up completely 777. The rest is, well, child's play.