PDA

View Full Version : Our website has been hacked!!! Please help - moved by Tom


Charliechech
August 14th, 2006, 06:33 AM
Hello all

I have been searching the internet for help with our problem and hoping someone can help.

Our website has been hacked by:
Hacked By CyberLord Please Search ISLAM

The website is gone, but luckily we have the whole programme on disc.

The story is this could just be coincidence.
We had a young guy make our site, he was letting us down so we had him change host so we could control the site. An old friend of ours helped as he is a computer programmer. He said there were no security settings to protect our site at all, so he installed some.

Everything ok for 2 days.

This morning at 3.30am we received sms from the young guy saying we should look at our site urgently

Questions:
Why was he on our site? (although he does stay up late working)
We have since learned that he has hacked before, did HE do it out of spite?

Where do we go from here? Can we upload the information back to the site?
We are contacting our host in about an hour as they haven't started work yet. I've been up since 4.30am this morning in a right flap. We have only been running for about 3 months, so much hard work has gone into this. I am gutted.

Do we report this to anyone?

Please please please can anyone offer advice or information. Any help would be appreciated.

Thank you all in advance

Charlie

smurfy
August 14th, 2006, 01:14 PM
Hi and welcome to Cybertech.
Our website gurus will be along shortly to hopefully give you some advice on securing your site/server from future attacks.

A simple search for the hacker that compromised your site would suggest that it is probably unlikely that the person who you asked to build the site originally was responsible for the defacement of it.
Google "hacked by CyberLord" (http://www.google.com/search?client=opera&rls=en&q=%22hacked+by+cyberlord%22)
I'd say he was just guilty of leaving it wide open to random attacks although in saying that, the move to the new host may have also compromised any security he may have had in place at the previous host.

degsy
August 14th, 2006, 02:23 PM
Welcome :)

First thing to do is change all your passwords. Control Panel, FTP, Database etc.

Make them strong. 8 or more alphanumerical characters in mixed case.


If you have php scripts such as forums or upload scripts then make sure they are patched upto date.

Charliechech
August 14th, 2006, 08:20 PM
Hi all

Thank you so much for your replies. I couldn't reply earlier because sorting the problem.
We now have our site back. We were lucky, the hackers only put a cover page to stop access to the website and was resolved very quickly. Apparently thousands of websites were affected, so thankfully every site is ok now.
Thank you again for your help.

Charlie

lufbra
August 15th, 2006, 02:14 AM
What forum set up is it?