[Full-disclosure] Files keep appearing

0x80 at hush.ai 0x80 at hush.ai
Fri Jun 2 18:39:07 BST 2006


You've been owned

On Thu, 01 Jun 2006 21:08:54 -0700 Stephen Johnson 
<maillists at thelonecoder.com> wrote:
>I keep having a phishing website appear on my web server.
>
>They keep showing up in a Resources folder of one of the sites 
>that I host.
>I have gone through the logs and I am not seeing any connections.  

>I deleted
>the files this morning and this evening they re-appeared ‹ no 
>connections
>were made on my server during that period of time.
>
>Also, there are no cron jobs that I noticed that looked out of the 

>ordinary.
>
>I am running MySQL, PHP, Apache2 on a debian linux server.
>
>Any thoughts? 
>
>-- 
>Stephen Johnson
>--



Concerned about your privacy? Instantly send FREE secure email, no account required
http://www.hushmail.com/send?l=480

Get the best prices on SSL certificates from Hushmail
https://www.hushssl.com?l=485




Full-Disclosure is hosted and sponsored by Secunia.