My hosting account has been hacked!

Bai_Mike · 08-03-2009, 07:27 PM

My hosting account has been hacked!!

My hosting account under hostgator has been hacked and the files look perfectly ok under the cpanel but when I access the sites itself, all of them show the hacked site frontpage

I have emailed hostgator's security team on this but I'm not very optimistic about it. I'm not even sure how they did it without accessing my cpanel at all!

rsteadm2 · 08-03-2009, 08:01 PM

Have you checked your registrar? May have hacked that and changed the nameserver to point to their domain host...

Just a thought.

jendoe · 08-03-2009, 08:06 PM

Oh, man... I'm sorry, that sucks. If you haven't done it in awhile, you might also run some checks on your computer for spyware/viruses. Seems like there have been quite a few reports lately of spyware that sits on your computer and just looks for ftp info (where you log into, login and passwords) - which is then used to access your hosting.

Good luck getting everything sorted out...

SteveJohnson · 08-03-2009, 08:09 PM

Lots of ways to hack a server. Depends on what scripts you've been running, etc. 1st step is to make sure you have a secure password ( 12 chars, upper/lowercase alpha, numerics, and punctuation) and change it AT LEAST monthly if not weekly.

The files may look fine from the outside thru your cPanel file utility, but most likely have some javascript added to them. Hope you have backup files.

HG may be able to tell you how the intrusion occurred.

dalvia · 08-03-2009, 08:13 PM

Boy of boy. I feel for you. In a matter of a week, I had 2 of my own site hacked and 6 of my clients. What a nightmare!!!

I had to hire an elancer to go through and clean up all the bad code and resubmit to Google. I then went through and changed all the passwords. Not a fun process at all.

Chin up. You may have to hire someone to help,

Dale

Floyd Fisher · 08-03-2009, 08:23 PM

Quote:

Originally Posted by zijian

My hosting account has been hacked!!

My hosting account under hostgator has been hacked and the files look perfectly ok under the cpanel but when I access the sites itself, all of them show the hacked site frontpage

I have emailed hostgator's security team on this but I'm not very optimistic about it. I'm not even sure how they did it without accessing my cpanel at all!

First off, are you sure it's the webhosting account that has been hacked, and not the domain name?

Here's how to tell: When you log in under cpanel, try viewing the page using file manager.

If it looks ok there, more than likely the domain was hijacked. This seems to be happening a lot lately.

Bai_Mike · 08-03-2009, 08:25 PM

A fine time to catch up on some of the training videos I have lying around and spend a bit of time trolling in the forums.

Doubt my computer has been trojaned though. Eset has that covered full and well. Gonna wait for hostgator to take action and reply on it. Hope that they be fast on this issue.

Devan Koshal · 08-03-2009, 08:25 PM

Are you using any software other than wordpress? A lot of software sold by marketers isn't very secure against cross site scripting, which might be the culprit.

Bai_Mike · 08-03-2009, 08:32 PM

Update : Deleted some autoblogs that I made from some script that I had purchased and downloaded.

Hostgator also restored my account. The only thing I'm pissed is that is actually affected all my sites across the same hosting account.

mentorondemand · 08-03-2009, 09:56 PM

Ouch!

One of Worst feeling in the world my Real Estate site
was hacked.

First thing you want to do is check your bank
account see if there are any internet charges.

I know you thinking I was hacked, so was I
several years ago.

the charges will be in small amounts, this is what
occurred to me. Luckily a customer called me about
my site and I just happen to check one of my accounts.

It was a eastern European IP address and nothing could
be done about it.

Seems like it was some type of spy bot on my desktop.

I recommend immediately get free version of
Spybot Search and Destroy it is a great program.
I have no affiliation to the product.

It will clear your computer of any hidden spyware.

they give you a 30 day trial and that all you need.
Just make sure you get the original product
because there is a lot of copy cats.

good luck

08-03-2009, 07:27 PM	#1
Bai_Mike HyperActive Warrior War Room Member Join Date: Jul 2008 Location: , , . Posts: 193 Thanks: 21 Thanked 4 Times in 4 Posts	My hosting account has been hacked! My hosting account has been hacked!! My hosting account under hostgator has been hacked and the files look perfectly ok under the cpanel but when I access the sites itself, all of them show the hacked site frontpage I have emailed hostgator's security team on this but I'm not very optimistic about it. I'm not even sure how they did it without accessing my cpanel at all!

08-03-2009, 08:01 PM	#2
rsteadm2 Super Warya War Room Member Join Date: Dec 2008 Location: Lakeland, FL Posts: 132 Thanks: 63 Thanked 21 Times in 17 Posts Social Networking Contact Info	Re: My hosting account has been hacked! Have you checked your registrar? May have hacked that and changed the nameserver to point to their domain host... Just a thought.
	Mobile Web Site Creator - Create Mobile Web Sites - "16 minutes flat" -Video Proof

08-03-2009, 08:06 PM	#3
jendoe Active Warrior War Room Member Join Date: Jun 2009 Location: Atlanta, GA Posts: 72 Thanks: 52 Thanked 10 Times in 9 Posts	Re: My hosting account has been hacked! Oh, man... I'm sorry, that sucks. If you haven't done it in awhile, you might also run some checks on your computer for spyware/viruses. Seems like there have been quite a few reports lately of spyware that sits on your computer and just looks for ftp info (where you log into, login and passwords) - which is then used to access your hosting. Good luck getting everything sorted out...

08-03-2009, 08:09 PM	#4
SteveJohnson I am not a cowboy War Room Member Join Date: Apr 2007 Location: Caldwell, Idaho, USA. Posts: 1,644 Thanks: 235 Thanked 491 Times in 341 Posts Social Networking Contact Info	Re: My hosting account has been hacked! Lots of ways to hack a server. Depends on what scripts you've been running, etc. 1st step is to make sure you have a secure password ( 12 chars, upper/lowercase alpha, numerics, and punctuation) and change it AT LEAST monthly if not weekly. The files may look fine from the outside thru your cPanel file utility, but most likely have some javascript added to them. Hope you have backup files. HG may be able to tell you how the intrusion occurred.
	this area under construction

08-03-2009, 08:13 PM	#5
dalvia HyperActive Warrior Join Date: Apr 2008 Location: Gold Coast - Australia Posts: 187 Thanks: 12 Thanked 7 Times in 7 Posts	Re: My hosting account has been hacked! Boy of boy. I feel for you. In a matter of a week, I had 2 of my own site hacked and 6 of my clients. What a nightmare!!! I had to hire an elancer to go through and clean up all the bad code and resubmit to Google. I then went through and changed all the passwords. Not a fun process at all. Chin up. You may have to hire someone to help, Dale
	iSystemize - The Step by Step Program to Systemizing Your Business With Video http://www.isystemize.com

08-03-2009, 08:25 PM	#7
Bai_Mike HyperActive Warrior War Room Member Join Date: Jul 2008 Location: , , . Posts: 193 Thanks: 21 Thanked 4 Times in 4 Posts	Re: My hosting account has been hacked! A fine time to catch up on some of the training videos I have lying around and spend a bit of time trolling in the forums. Doubt my computer has been trojaned though. Eset has that covered full and well. Gonna wait for hostgator to take action and reply on it. Hope that they be fast on this issue.

08-03-2009, 08:25 PM	#8
Devan Koshal Designer/Developer War Room Member Join Date: Sep 2008 Posts: 374 Thanks: 29 Thanked 12 Times in 10 Posts	Re: My hosting account has been hacked! Are you using any software other than wordpress? A lot of software sold by marketers isn't very secure against cross site scripting, which might be the culprit.

08-03-2009, 08:32 PM	#9
Bai_Mike HyperActive Warrior War Room Member Join Date: Jul 2008 Location: , , . Posts: 193 Thanks: 21 Thanked 4 Times in 4 Posts	Re: My hosting account has been hacked! Update : Deleted some autoblogs that I made from some script that I had purchased and downloaded. Hostgator also restored my account. The only thing I'm pissed is that is actually affected all my sites across the same hosting account.

08-03-2009, 09:56 PM	#10
mentorondemand Transcendental Warrior War Room Member Join Date: Jun 2009 Location: Virginia-Vegas-New York Posts: 89 Thanks: 19 Thanked 3 Times in 3 Posts	Re: My hosting account has been hacked! Ouch! One of Worst feeling in the world my Real Estate site was hacked. First thing you want to do is check your bank account see if there are any internet charges. I know you thinking I was hacked, so was I several years ago. the charges will be in small amounts, this is what occurred to me. Luckily a customer called me about my site and I just happen to check one of my accounts. It was a eastern European IP address and nothing could be done about it. Seems like it was some type of spy bot on my desktop. I recommend immediately get free version of Spybot Search and Destroy it is a great program. I have no affiliation to the product. It will clear your computer of any hidden spyware. they give you a 30 day trial and that all you need. Just make sure you get the original product because there is a lot of copy cats. good luck