Mr Danger Hacked 10 of my wordpress sites

by Alpha981

Posted: 15 years ago 9 replies

OFF TOPIC

Hello Warriors

Need to rant a little:::!!

I have about 30 Websites on my own server but due to the running costs I decided
which has the Plesk Control panel which limits you to either 10 or 30 websites
depending on your licence but this put the price up
So I decided to move to hostgator as all my fellow warriors rave about them
and they have cpanel with is im my opinion better than plesk as its Auto installs Wordpress
and the latest version 2.7.1, plesk Auto install an old version 2.3

Well I checked my Adsence earning this morning from my trusty Iphone only to see
the Traffic was down on a few sites.

I went to these sites only to find some F**** idiots called Mr Danger and SQL Ameer AL 7OB with a intel inside logo but saying Hacker inside with Arabic writing under.

Have changed my wordpress index file

So far I have seen 10 of my sites that have been Hacked.

Has anyone any ideas how I can provent this in Future.

Should I report this to Hostgator or will they just cancel my Account...

I ran my own server for the last 7 years and never got hacked

Any help would be greatfull

Alpha981

#worpress hacked

derekwong28 15 years ago

You must contact Hostgator immediately about this. It sounds like that the hacker did it for fun but it could be much serious than that. I have had my accounts on my server hacked so that it could be used to send out massive spam mails. More recently, a hacker uploaded lots of phlishing sites onto one of my account so that the url simulated the online banking page of a number of banks.

I am not sure how you can prevent it except to make sure that all your scripts are up to date. I am not sure whether cpanel itself is the problem in this case. Another thing you can do is to put each site onto an individual account rather than to use addon domains. That way, you will avoid other sites being affected once a hacker got into an account.

Derek
- Thanks
- 2 replies
Signature

Do not get between a wombat and a chocolate biscuit; you will regret it dearly!
{{ DiscussionBoard.errors[815462].message }}
- Alpha981 15 years ago
  
  Hello
  
  I have sent a support ticket now to Hostgator
  
  I have also found that it was not just my wordpress sites that got hacked
  it was also a 2 static sites as well
  
  Will have to see what Hostgator says
  
  I have restored all the index files again with the originals, as I had them
  all backed up as I was moving servers
  
  Alpha981
  
  Thanks
  
  Signature
  Free Visual Custom QR Codes For Mobile Internet Marketing, The following formats are supported: Text, URL, Facebook Profile, Facebook Like,Twitter Profile, Twitter Status, Linkedin Profile, vCard, meCard
  
  {{ DiscussionBoard.errors[815549].message }}
- Mary Laine 15 years ago
  
  I agree. Hostgator should be alerted to this right away. I have not had this happen, but I would be furious too!
  
  EDIT, you wrote that you had put in a ticket at the same time I posted this. I would be interested in what they say about this situation
  
  Thanks
  
  {{ DiscussionBoard.errors[815649].message }}

Alpha981

15 years ago

Hi

I have had a reply back from Hostgator

"It appears as though these hackers have access to your account password, which would allow them access to any of your sub accounts."

they have asked to confirm a few more details, which for security reasons I have not
put here.

Will keep you posted

Alpha981

Thanks
1 reply

Signature

Free Visual Custom QR Codes For Mobile Internet Marketing, The following formats are supported: Text, URL, Facebook Profile, Facebook Like,Twitter Profile, Twitter Status, Linkedin Profile, vCard, meCard

{{ DiscussionBoard.errors[815706].message }}

Michael Motley

15 years ago

Originally Posted by Alpha981

which means 'we dont know how they got in, so it must be YOUR fault'

By telling you 'it looks like they have access to your password', they are lining things up so that they can deny any responsibility for this. As soon as they do their 'further checks' they will come back to you, reinforce that it looks as though the perpetrators have acess to your pw, then they will send you the section of their TOS that you signed when you started their service that says you are responsible for the security of your account, and they will wash their hands of it.

Thanks

{{ DiscussionBoard.errors[815733].message }}

Alpha981 15 years ago

from the log report that they sent there was an Ip address from Someone in Jordan
Country (per IP registrar): JO [Jordan]
- Thanks
Signature
Free Visual Custom QR Codes For Mobile Internet Marketing, The following formats are supported: Text, URL, Facebook Profile, Facebook Like,Twitter Profile, Twitter Status, Linkedin Profile, vCard, meCard
{{ DiscussionBoard.errors[815753].message }}
Alpha981 15 years ago

Update from Hostgator

hello,
This shows that your reseller account itself was hacked as well as the other accounts under your control. This more than likely happened because of a trojan or keylogger on a PC that is authorized to access the account. We suggest cleaning all PCs allowed to access the accounts before changing any passwords and we recommend doing it as soon as you can.
- Thanks
- 1 reply
Signature
Free Visual Custom QR Codes For Mobile Internet Marketing, The following formats are supported: Text, URL, Facebook Profile, Facebook Like,Twitter Profile, Twitter Status, Linkedin Profile, vCard, meCard
{{ DiscussionBoard.errors[815758].message }}
- AnG3L 15 years ago
  
  Hello,
  
  The Best u can do is contact with the hacker himself from his mail he put on the page, and from there u can say what u wana say to him and maybe who knows he leave it next time. I think this the best u can do is contact him.
  
  Thanks
  
  {{ DiscussionBoard.errors[1140511].message }}

Mr Danger Hacked 10 of my wordpress sites

Trending Topics

Been a while! Any of you Old Timers here?

How much does the rebranding affect CR ?

Are billboards still effective in driving customers?

Boat and Jet Ski Rentals...... Door Hangers Effective?

Clickbank low cost recurring