HuntingNut Hacked??

Ominivision1 · Posted: Sun May 27, 2012 12:20 pm Post subject: HuntingNut Hacked??

Stupid hackers have nothing better to do than to hack a website, this am I was presented with the following screen every time I went to the Nut.

Pumpkinslinger · Posted: Sun May 27, 2012 1:12 pm Post subject: Re: HuntingNut Hacked??

I saw that earlier too. Wish there was some way to boobytrap web sites to address stuff like that.

Suzanne · Posted: Sun May 27, 2012 4:53 pm Post subject: Re: HuntingNut Hacked??

I saw that. Just got through writing a long winded note to Vinnie about his new look and when I hit submit, I got the hacker thing. Very proud of themselves too, complete with music.

gelandangan · Posted: Sun May 27, 2012 5:59 pm Post subject: Re: HuntingNut Hacked??

I have not notice that yet?

Vince · Posted: Sun May 27, 2012 11:13 pm Post subject: Re: HuntingNut Hacked??

Gone now Gelan...didn't last long...I think. I noticed it late last night mate.

Hopefully Dallan has a power supply that zapped a guzzillion volts down the line right back to the hackers computer...and hopefully he/she/it was using it at the time.

Cheers, Vince

pete4d · Posted: Mon May 28, 2012 5:57 am Post subject: Re: HuntingNut Hacked??

Didn't see this hacker , but on another site i had a hacker overlay of my account . Didn't take but a few seconds for the filters to pick that one up .

DallanC · Site Admin Joined: Jan 18, 2005 Posts: 3572 Location: Utah

If anything it happened on the webhost's side. Near as I can tell nothing changed on the site itself. The database is extremely secure so the odds they did anything more than changing the screen is low. I will run it past my webhost and see what they say.

Does anyone have a rough guess on the timeframe when it was over-ridden?

-DallanC

DallanC · Site Admin Joined: Jan 18, 2005 Posts: 3572 Location: Utah

Ok I just visited the webhost's site and they indeed got hacked at a server level. Once the hackers had access they uploaded a file to various websites which did the display page. The host automatically backs up everyones sites every 12 hours so they were able to fix it without my interevention (how cool is that).

They are working atm on fixing everone else's websites that they host(nearly 1000 sites got affected). Once that is done, they will work on closing any security holes that remain as to prevent this from happening again.

7 years of using them as our host and this is the first major issue I've had with them... and they got it fixed before I knew about it!

-DallanC

Fireman_DJ · Posted: Mon May 28, 2012 1:23 pm Post subject: Re: HuntingNut Hacked??

I've seen this particular idiots work before.
He goes for the main server and puts up his page to prove he's l33t.

To my knowledge, he's never actually harmed any sites or stolen any data from them, just a pain in the ass.

I wouldn't worry too much about it. I mean, it's not like we have credit card data on here to worry about.

Elvis · Posted: Tue May 29, 2012 12:59 am Post subject: Re: HuntingNut Hacked??

great work DallanC it sounds like you have got things sorted well.
once again thankyou for all your hard work.

Eremius · Member Joined: Dec 04, 2011 Posts: 92 Location: Owosso, MI

DallanC wrote:

They are working atm on fixing everone else's websites that they host(nearly 1000 sites got affected). Once that is done, they will work on closing any security holes that remain as to prevent this from happening again.

Having worked for a web hosting company before, this seems kind of bass ackwards.

DallanC · Site Admin Joined: Jan 18, 2005 Posts: 3572 Location: Utah

The hacker gained admin access to the webhost's ftp and uploaded a replacement index.php to all the hosted websites, it did nothing malicious. The webhost just copied back the original index.php's from the prior backup. Like I said 7 years of hosting with them and this is the only time anything like this has happened.

They assigned a few tech's to fixing up affected sites while the lead tech and a few others tracked down how it happened and plugged security holes.

-DallanC

Vince · Posted: Wed May 30, 2012 3:37 am Post subject: Re: HuntingNut Hacked??

Be great if they were able to track down the hacker and plug him.

Although, it is a bit of a consolation that he didn't set out to do anything malicious...just cause nuisance problems.

Cheers, Vince

Bushmaster · Posted: Wed May 30, 2012 7:20 am Post subject: Re: HuntingNut Hacked??

That's damage enough in my opinion. Hang him or them.

Ominivision1 · Posted: Fri Jun 01, 2012 10:27 am Post subject: Re: HuntingNut Hacked??

Before work this am (4am) I went to the Nut and was greeted by this with 2 different browsers and tried at work and the same thing. Site is fine now but I just wanted Dallan to know.