PDA

View Full Version : Account Hacked by "XTech Inc"

RodneyL
03-12-2007, 07:24 PM
My main domain TOXICREATIVITY.COM and all my subdomains were hacked today. The index.html pages were changed to read... "XTech Inc in your b0x ** we are: Status-x - Pablin77 - Furtivo - Sys7ech !"

As soon as I found out I deleted all the index pages and uploaded the correct versions. I have also changed all my passwords.

Was this just a case of someone cracking my main pw or was there a server vulnerability, you think?
areidmtm
03-12-2007, 07:41 PM
What are you folder permissions set to?
RodneyL
03-12-2007, 08:41 PM
755- guess that's default
magpie2419
03-13-2007, 04:03 AM
What scripts are you using? and forums? are they all up to date, its very unlikely that its a server problem. More than likely you have an insecure script, forum, cms. Are you useing PHP? Or someone has your password.
RodneyL
03-13-2007, 05:42 PM
What scripts are you using? and forums? are they all up to date, its very unlikely that its a server problem. More than likely you have an insecure script, forum, cms. Are you useing PHP? Or someone has your password.

Using: PHP List - Gallery - Coppermine - and Wordpress. But the wordpress site was the only one not defaced. They are all up to date.
magpie2419
03-14-2007, 03:49 AM
If you are sure all your stuff is up to date and your password is secure, check your logs and see if there are any clues as to how this person got into your site, I would also speak to support and ask them to look into it as well.