full-disclosure - Files keep appearing

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <447FC05E.9040000@netragard.com>
Date: Fri Jun  2 10:04:22 2006
From: adriel at netragard.com (Adriel T. Desautels)
Subject: Files keep appearing

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
 
Stephen,
    I can help you if you are interested. Let me know.

Stephen Johnson wrote:
> I keep having a phishing website appear on my web server.
>
> They keep showing up in a Resources folder of one of the sites that
> I host. I have gone through the logs and I am not seeing any
> connections.  I deleted the files this morning and this evening
> they re-appeared ? no connections were made on my server during
> that period of time.
>
> Also, there are no cron jobs that I noticed that looked out of the
> ordinary.
>
> I am running MySQL, PHP, Apache2 on a debian linux server.
>
> Any thoughts?
>
>
> ----------------------------------------------------------------------
>
>
> _______________________________________________ Full-Disclosure -
> We believe in it. Charter:
> http://lists.grok.org.uk/full-disclosure-charter.html Hosted and
> sponsored by Secunia - http://secunia.com/


- --


Regards,
    Adriel T. Desautels
 
    Chief Technology Officer
    Netragard, LLC. || http://www.netragard.com
    PGP KEY ID      : 0x7B6F2284
    -------------------------
    "We make IT secure."
 
            *** NOTICE ***

    Please do not email sensitive information to
    this email address using clear text email.
    Please encrypt all sensitive information prior
    to transmission. To obtain my PGP key please
    browse to the URL below.

 http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x7B6F2284

            *** NOTICE ***
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (MingW32)
 
iD8DBQFEf8Bd4fEyMUBMiWwRAl7NAKDd7I80knmnpmXPPYmMdIZ4knOAvwCgjN4q
2Pfq3T+vcHxMUsBmSCIL1dM=
=u5/I
-----END PGP SIGNATURE-----




BullGuard Anti-virus has scanned this e-mail and found it clean.
Try BullGuard for free: www.bullguard.com