PDA

View Full Version : Defaced!

Nickatilynx
12-21-2004, 12:08 PM
No shit!

Need any help?
Dravyk
12-21-2004, 12:43 PM
Fuckers!!

Someone got into AllOfEm and MainstreamWebmasters, too!

:shooter:
Almighty Colin
12-21-2004, 12:47 PM
dayum
Rolo
12-21-2004, 12:51 PM
You got backups?
PornoDoggy
12-21-2004, 01:32 PM
Dravyk, I told you who to look at already ... it was MikeAI & Timon, who are working covertly for Bush & Ashcroft.
Nickatilynx
12-21-2004, 01:32 PM
Originally posted by Peaches@Dec 21 2004, 10:48 AM
Looks like several sites got hit :(
Who else?
Forest
12-21-2004, 01:45 PM
That sucks

wheres the bat?
Dravyk
12-21-2004, 01:45 PM
Seems to be a board exploit. (Which has a fix, but the PhpBB guys never emailed their list about the exploit nor the update!)

I do have daily backups. They can't do the backups though, as it seems (thanks to Opti who can find info on anything) that (according to a post on a board that was found), if they restore, the worm reexecutes all over again. Apparently they have to find the worm on the server first. Then do the restore. No time telling how long it will take. But CyberWurx guys are good.

Appreciate the offer of assistance. And will keep it in mind. Not much can be done at the moment except a search and destroy mission by the server guys for the worm though.
TheEnforcer
12-21-2004, 01:46 PM
Well that fucking sucks. Sorry to hear guy. Wish I could help but I don't know squat on the tech end of things.
Peaches
12-21-2004, 01:47 PM
Looks like several sites got hit :(
gonzo
12-21-2004, 04:06 PM
NOT OPRANO!!!!
XXXManager
12-21-2004, 05:21 PM
Low life crackers :grrr:
Dravyk
12-21-2004, 09:47 PM
Aha! This is what hit us.


Net worm using Google to spread

A Web worm that identifies potential victims by searching Google is spreading among online bulletin boards using a vulnerable version of the program phpBB, security professionals said on Tuesday.

The Santy worm uses a flaw in the widely used community forum software known as the PHP Bulletin Board (phpBB) to spread, according to updated analyses. The worm searches Google for sites using a vulnerable version of the software, antivirus firm Kaspersky said in a statement.

Almost 40,000 sites may have already been infected.

Rest of story here: http://news.zdnet.com/2100-1009_22-5499725.html


And, btw, we're back up. And the vulnerability patched! Whew!
pearl noir studio
12-21-2004, 10:44 PM
that sucks big time.
PornoDoggy
12-22-2004, 01:21 AM
Santy worm, huh?

Bah fucking humbug.
Timon
12-22-2004, 01:42 AM
Originally posted by PornoDoggy@Dec 21 2004, 01:33 PM
Dravyk, I told you who to look at already ... it was MikeAI & Timon, who are working covertly for Bush & Ashcroft.
You socialists always start pointing fingers before you know the facts, and look like fools later, that's why you lost the election ;-)
Pornwolf
12-22-2004, 02:16 AM
Oh sheet! I have to check my BB's!