My hosting account has been hacked!

magiangel · 08-03-2009, 06:27 PM

My hosting account has been hacked!!

My hosting account under hostgator has been hacked and the files look perfectly ok under the cpanel but when I access the sites itself, all of them show the hacked site frontpage

I have emailed hostgator's security team on this but I'm not very optimistic about it. I'm not even sure how they did it without accessing my cpanel at all!

rsteadm2 · 08-03-2009, 07:01 PM

Have you checked your registrar? May have hacked that and changed the nameserver to point to their domain host...

Just a thought.

jendoe · 08-03-2009, 07:06 PM

Oh, man... I'm sorry, that sucks. If you haven't done it in awhile, you might also run some checks on your computer for spyware/viruses. Seems like there have been quite a few reports lately of spyware that sits on your computer and just looks for ftp info (where you log into, login and passwords) - which is then used to access your hosting.

Good luck getting everything sorted out...

SteveJohnson · 08-03-2009, 07:09 PM

Lots of ways to hack a server. Depends on what scripts you've been running, etc. 1st step is to make sure you have a secure password ( 12 chars, upper/lowercase alpha, numerics, and punctuation) and change it AT LEAST monthly if not weekly.

The files may look fine from the outside thru your cPanel file utility, but most likely have some javascript added to them. Hope you have backup files.

HG may be able to tell you how the intrusion occurred.

dalvia · 08-03-2009, 07:13 PM

Boy of boy. I feel for you. In a matter of a week, I had 2 of my own site hacked and 6 of my clients. What a nightmare!!!

I had to hire an elancer to go through and clean up all the bad code and resubmit to Google. I then went through and changed all the passwords. Not a fun process at all.

Chin up. You may have to hire someone to help,

Dale

Floyd Fisher · 08-03-2009, 07:23 PM

Quote:

Originally Posted by zijian

My hosting account has been hacked!!

My hosting account under hostgator has been hacked and the files look perfectly ok under the cpanel but when I access the sites itself, all of them show the hacked site frontpage

I have emailed hostgator's security team on this but I'm not very optimistic about it. I'm not even sure how they did it without accessing my cpanel at all!

First off, are you sure it's the webhosting account that has been hacked, and not the domain name?

Here's how to tell: When you log in under cpanel, try viewing the page using file manager.

If it looks ok there, more than likely the domain was hijacked. This seems to be happening a lot lately.

magiangel · 08-03-2009, 07:25 PM

A fine time to catch up on some of the training videos I have lying around and spend a bit of time trolling in the forums.

Doubt my computer has been trojaned though. Eset has that covered full and well. Gonna wait for hostgator to take action and reply on it. Hope that they be fast on this issue.

Devan Koshal · 08-03-2009, 07:25 PM

Are you using any software other than wordpress? A lot of software sold by marketers isn't very secure against cross site scripting, which might be the culprit.

magiangel · 08-03-2009, 07:32 PM

Update : Deleted some autoblogs that I made from some script that I had purchased and downloaded.

Hostgator also restored my account. The only thing I'm pissed is that is actually affected all my sites across the same hosting account.

mentorondemand · 08-03-2009, 08:56 PM

Ouch!

One of Worst feeling in the world my Real Estate site
was hacked.

First thing you want to do is check your bank
account see if there are any internet charges.

I know you thinking I was hacked, so was I
several years ago.

the charges will be in small amounts, this is what
occurred to me. Luckily a customer called me about
my site and I just happen to check one of my accounts.

It was a eastern European IP address and nothing could
be done about it.

Seems like it was some type of spy bot on my desktop.

I recommend immediately get free version of
Spybot Search and Destroy it is a great program.
I have no affiliation to the product.

It will clear your computer of any hidden spyware.

they give you a 30 day trial and that all you need.
Just make sure you get the original product
because there is a lot of copy cats.

good luck

08-03-2009, 06:27 PM	#1
magiangel HyperActive Warrior War Room Member Join Date: Jul 2008 Location: , , . Posts: 147 Thanks: 20 Thanked 1 Time in 1 Post	My hosting account has been hacked! My hosting account has been hacked!! My hosting account under hostgator has been hacked and the files look perfectly ok under the cpanel but when I access the sites itself, all of them show the hacked site frontpage I have emailed hostgator's security team on this but I'm not very optimistic about it. I'm not even sure how they did it without accessing my cpanel at all!

08-03-2009, 07:01 PM	#2
rsteadm2 Active Warrior Join Date: Dec 2008 Location: Lakeland, FL Posts: 69 Thanks: 21 Thanked 8 Times in 5 Posts Social Networking	Re: My hosting account has been hacked! Have you checked your registrar? May have hacked that and changed the nameserver to point to their domain host... Just a thought.
	Make Money Online

08-03-2009, 07:06 PM	#3
jendoe Active Warrior War Room Member Join Date: Jun 2009 Location: Atlanta, GA Posts: 63 Thanks: 31 Thanked 8 Times in 7 Posts	Re: My hosting account has been hacked! Oh, man... I'm sorry, that sucks. If you haven't done it in awhile, you might also run some checks on your computer for spyware/viruses. Seems like there have been quite a few reports lately of spyware that sits on your computer and just looks for ftp info (where you log into, login and passwords) - which is then used to access your hosting. Good luck getting everything sorted out...

08-03-2009, 07:09 PM	#4
SteveJohnson I am not a cowboy War Room Member Join Date: Apr 2007 Location: Caldwell, Idaho, USA. Posts: 472 Thanks: 11 Thanked 61 Times in 42 Posts Social Networking Contact Info	Re: My hosting account has been hacked! Lots of ways to hack a server. Depends on what scripts you've been running, etc. 1st step is to make sure you have a secure password ( 12 chars, upper/lowercase alpha, numerics, and punctuation) and change it AT LEAST monthly if not weekly. The files may look fine from the outside thru your cPanel file utility, but most likely have some javascript added to them. Hope you have backup files. HG may be able to tell you how the intrusion occurred.
	Some days you're the pigeon, some days you're the statue...

08-03-2009, 07:13 PM	#5
dalvia HyperActive Warrior Join Date: Apr 2008 Location: Gold Coast - Australia Posts: 183 Thanks: 11 Thanked 7 Times in 7 Posts	Re: My hosting account has been hacked! Boy of boy. I feel for you. In a matter of a week, I had 2 of my own site hacked and 6 of my clients. What a nightmare!!! I had to hire an elancer to go through and clean up all the bad code and resubmit to Google. I then went through and changed all the passwords. Not a fun process at all. Chin up. You may have to hire someone to help, Dale
	DIY Website Creation - Step-by-Step Video Training to Building Your Own Website with Wordpress http://www.diywebsitecreation.com Step Up and Speak - The Step-by-Step Blueprint to Winning Presentations http://www.stepupandspeak.com

08-03-2009, 07:25 PM	#7
magiangel HyperActive Warrior War Room Member Join Date: Jul 2008 Location: , , . Posts: 147 Thanks: 20 Thanked 1 Time in 1 Post	Re: My hosting account has been hacked! A fine time to catch up on some of the training videos I have lying around and spend a bit of time trolling in the forums. Doubt my computer has been trojaned though. Eset has that covered full and well. Gonna wait for hostgator to take action and reply on it. Hope that they be fast on this issue.

08-03-2009, 07:25 PM	#8
Devan Koshal Designer/Developer War Room Member Join Date: Sep 2008 Location: Northampton, UK Posts: 377 Thanks: 29 Thanked 12 Times in 10 Posts Contact Info	Re: My hosting account has been hacked! Are you using any software other than wordpress? A lot of software sold by marketers isn't very secure against cross site scripting, which might be the culprit.
	Kout :- Selling online has never been so simple, elegant, & intuitive beta goes live in December 10 Stunning Wordpress Minisites @ $37 - with Private Label Rights - 50 Warriors only

08-03-2009, 07:32 PM	#9
magiangel HyperActive Warrior War Room Member Join Date: Jul 2008 Location: , , . Posts: 147 Thanks: 20 Thanked 1 Time in 1 Post	Re: My hosting account has been hacked! Update : Deleted some autoblogs that I made from some script that I had purchased and downloaded. Hostgator also restored my account. The only thing I'm pissed is that is actually affected all my sites across the same hosting account.

08-03-2009, 08:56 PM	#10
mentorondemand Transcendental Warrior War Room Member Join Date: Jun 2009 Location: Virginia-Vegas-New York Posts: 93 Thanks: 17 Thanked 3 Times in 3 Posts	Re: My hosting account has been hacked! Ouch! One of Worst feeling in the world my Real Estate site was hacked. First thing you want to do is check your bank account see if there are any internet charges. I know you thinking I was hacked, so was I several years ago. the charges will be in small amounts, this is what occurred to me. Luckily a customer called me about my site and I just happen to check one of my accounts. It was a eastern European IP address and nothing could be done about it. Seems like it was some type of spy bot on my desktop. I recommend immediately get free version of Spybot Search and Destroy it is a great program. I have no affiliation to the product. It will clear your computer of any hidden spyware. they give you a 30 day trial and that all you need. Just make sure you get the original product because there is a lot of copy cats. good luck