| jeff on 23 Feb 2012 18:19:20 -0800 |
[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]
| Re: [PLUG] Hacked server - recovery |
On 02/23/2012 06:57 PM, Eric at Lucii.org wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I'll try running rkhunter although it appears to be a really simple php exploit that the hacker used to send spam. All the spam was from www-data@domain.com and I don't see any other evidence that they had any root privileges or acted to do anything other than send spam.
always safest to assume the worst. There's a positive thought :) ___________________________________________________________________________ Philadelphia Linux Users Group -- http://www.phillylinux.org Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce General Discussion -- http://lists.phillylinux.org/mailman/listinfo/plug