QiQ Suck

[Guest]

 

[daz]

Malware upload/injection on your website would typically be through leaked FTP details. Were they able to provide any logs or insight as to why you experience the issue with your website?

 

[Dano]

Oh, now that makes sense, one of my sites had this same issue last week too.

 

[NathanE]

LAMP is difficult to run securely. See these issues all the time with small hosts.

 

[Beansprout]

LAMP is difficult to run securely. See these issues all the time with small hosts.

The only way for other accounts on a shared server to be affected by one account are:

- Incorrect permissions
- Server getting rooted

Nothing to do with 'LAMP'...to do with incompetent administration. I wouldn't be surprised if the recent Exim 0day was the cause, or they're not running suPHP ie not isolating accounts from each other, or the attackers simply gained FTP passwords and attacked the sites, or the sites ran outdated software.

It's a fun world....maybe once a month we get yelled at with clients declaring we should secure our servers. (most clients are understanding tho)

 

[Dano]

Sites weren't hacked, it was a DNS issue as far as I know.

 

[Dano]

Well someone managed to alter several files on my site and a few others at the weekend.

Could be a seperate issue as none of my sites were hacked but several did have DNS issues, or possibly I was just lucky.