Re: FN-FORUM: Hacked homepage

date posted 17th March 2008 20:33

Dean,

> We've had malware installed a couple of times now (Thursday and Sunday)
> on our homepage regardless of whatever security measures we put in
> place. My question is: does anyone know any experts or specialists in
> this kind of thing that can tell us where we (or our hosts, more likely)
> are going wrong?

I presume the hosts have run the usual rootkit finding software
(chkrootkit, rkhunter), to find where the back door is?

> It's driving me around the twist and short of moving the site - which
> I'm loath to do until we know where the problem lies - I'd like to get
> someone's opinion that might actually know where the problem lies.

Are you running any well-known software, such as for forums, photo
galleries, CMS, etc. that hasn't been kept up-to-date with security fixes?
Is the server's OS up-to-date with security fixes?

Can you tell us the URL of the site?

Anthony
--
www.fonant.com - Quality web sites