lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Fri Jun  2 17:10:06 2006
From: ademar.gonzalez at gmail.com (Ademar Gonzalez)
Subject: Files keep appearing

Hi Stephen .

On 6/2/06, Stephen Johnson <maillists@...lonecoder.com> wrote:
>
>  I keep having a phishing website appear on my web server.
>
>  They keep showing up in a Resources folder of one of the sites that I host.
>  I have gone through the logs and I am not seeing any connections.  I
> deleted the files this morning and this evening they re-appeared ? no
> connections were made on my server during that period of time.
>
>  Also, there are no cron jobs that I noticed that looked out of the
> ordinary.
>
>  I am running MySQL, PHP, Apache2 on a debian linux server.
>
>  Any thoughts?
>
>  --
>  Stephen Johnson

Look for an insecure upload form on that website you are hosting, most
probably they are uploading their stuff thought there unless you've
been rooted :-)


Regards.

ademar

Powered by blists - more mailing lists