Infiltrated website

[Peggy Burke]

Just had the following e-mail from a friend. Anyone got any ideas what she should do to avoid this happening again. Suggested she contact her ISP and change any passwords. Also asked if she has a firewall and anti-spy software installed.

 

I've just gone onto our wedding photo website and some b**st*rd has hacked into it and trashed it - it's now got pictures of injured Iraqi kids and a rather unpleasant message to anyone that goes there saying that they're to blame for Iraq, Afghanistan, Palestine etc!!!

 

Any suggestions will be gratefully received and passed on.

 

Thanks

 

Peggy

 

[ 17. August 2005, 04:58 PM: Message edited by: Peggy Burke ]

[Newt]

Peggy - I think what you suggested is about all that can be done.

[Andy_1984]

if i could see this image gallery i could be of more help, its more than likely and exploit been used on it to upload images without permission. cut a long story shot, update it or get a new one suggest coppermine gallery

[UK-Fishing-Tackle.co.uk]

I'd go with a server exploit maybe - seems rather time consuming and pointless for someone to scrape login details for such things...

 

...If it was keylogged (i.e. a virus for example), then they'd certainly not bother alerting you by plastering images on a wedding website WHEN your credit card details etc would be still potentiallly up for grabs!!

[Peggy Burke]

Thanks guys for all the advice. My friend has just e-mailed me to say that her website was being hosted by a friend and another site he was hosting had also been hit. However he's managed to salvage her site and everything is now back to normal.

 

Really does make you wonder though at the low-life out there.

 

Peggy