Re: Help! Blogs.ntu.edu.sg was hacked.
Jackie McBride <[email protected]> Tue, 18 Dec 2012 08:19:30 -0700
| Newsgroups | gmane.comp.security.web-applications |
|---|---|
| Message-ID | <CAM+Q2c7nh2yfS27hTVs-wb1cTwgOSJhb-pRh6w38Xnmm8+2CzA@mail.gmail.com> |
Well, these things can occur on multiple levels. If you searched the database & found nothing, then your next course of action is to consult your hosting provider (if you're not it). The .htaccess file may provide clues, but, whatever the case, it does suggest the possibility of a server rather than simply a site hack. If that is indeed the case, & you're on shared hosting, then the hosting provider really needs to be contacted, because you don't have sufficient privileges to remediate that. On 12/18/12, mitchell <[email protected]> wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Check the .htaccess files. > > - -- > Dimitar Ivanov > Security Consultant > Web: http://www.websecuritywatch.com/ > E-mail: [email protected], [email protected] > > > On 12/17/2012 06:04 PM, Teo En Ming (Zhang Enming) wrote: >> Dear list, >> >> Blogs.ntu.edu.sg was hacked recently. Please search the Yahoo! >> search engine for blogs @ ntu. You will observe that the Yahoo! >> search engine returns results displaying nike shoe advertisements. >> If the user agent is a browser or Google Bot, and the referrer is >> Google, traffic to blogs.ntu.edu.sg will be redirected to >> http://www.newfreeshoes.com/ >> >> We have searched the wordpress directories and the mysql database >> but found nothing. How can we trace what the hackers have done to >> blogs.ntu.edu.sg? >> >> Thank you very much. >> > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.11 (GNU/Linux) > Comment: Using GnuPG with undefined - http://www.enigmail.net/ > > iEYEARECAAYFAlDQF1wACgkQiMNI9JfSVMHMPQCgl+HhKAg+f7F7iY1Qzm9f7uF3 > n3QAoJKJZfvkoXvnpY00VxtuAbXob93j > =eP8d > -----END PGP SIGNATURE----- > > > > This list is sponsored by Cenzic > -------------------------------------- > Let Us Hack You. Before Hackers Do! > It's Finally Here - The Cenzic Website HealthCheck. FREE. > Request Yours Now! > http://www.cenzic.com/2009HClaunch_Securityfocus > -------------------------------------- > > -- Blame the computer--why not? It can't defend itself & occasionally might even be the culprit Jackie McBride Ask Me Computer Questions at: www.pcinquirer.com Jaws Scripting training materials: www.screenreaderscripting.com homePage: www.abletec.serverheaven.net This list is sponsored by Cenzic -------------------------------------- Let Us Hack You. Before Hackers Do! It's Finally Here - The Cenzic Website HealthCheck. FREE. Request Yours Now! http://www.cenzic.com/2009HClaunch_Securityfocus --------------------------------------