Was the DTT hack?

[Cafe_to_go]

I was having trouble getting into the site today, it would direct me to a fake you have a virus website download this software bla bla...

 

[Rocan]

yeah the site was acting funny for me around 2.30 eastern time also.... i got redirected to a page blocked kind of site... odd.

 

[Tim]

loooong story that i'm just wrapping up. there was a hack which involved 100's of source code files. i've been cleaning all day.

 

[Rocan]

loooong story that i'm just wrapping up. there was a hack which involved 100's of source code files. i've been cleaning all day.

ouchers. any track on the IP? lets up the security.

if you can figure out what the physical location is, well pay this guy a visit... mwahahah

 

[DrJ]

Probably a someone from that other cafe racer site.

 

[ricrein]

Probably a someone from that other cafe racer site.

www.caferacernet.com = a bunch of haters!!!

 

[Erch]

Not that I know much about these things but it was probably those guys that have been hacking the ad provider services. Scary stuff like that is why I run no-script these days.

 

[Hoosier Daddy]

I see several posts by "new members" on stupid shit. might be worth your while to check the user name for post count before opening their new thread :
Fuckin spammers

 

[CresentSon]

Whatever it was the man behind the curtain took care of it. Lets hear it for Tim, man of the hour!

 

[troybilt]

Whatever it was the man behind the curtain took care of it. Lets hear it for Tim, man of the hour!

I give it a big HELL Yes! Nice to have the site back up. Thanks for the hardwork fellas

O Hail the great oz! Do not arouse the wrath of the great and powerful Oz!
http://www.youtube.com/watch?v=Mb45tJhzmcI

 

[locOleoN]

yeah.. this morn I had to delete/ban a bunch of spammers who signed up on the forum and posted spam...

We appreciate all the heads up guys and the notifications...

Tim has officially quit his $500,000/year job to work fulltime for free on DTT combating hackers and spammers!!.. ;D

 

[CresentSon]

Destroying spammers is proven to be way more rewarding than having money. ;D

 

[Tim]

There are a few add-ins I have to re-do, like the automatic video embedder - thanks for reminding me with the failed Youtube post

 

[Holiday]

To note, the redirect tries to install a Trojan. So ifyou landed on the other page I suggest doing a virus scan.

 

[DrJ]

Scarcat's revenge?

 

[Tim]

Is that like Montezuma's Revenge? Sounds about right.

 

[borzwazie]

Quote from: DrJ on May 07, 2010, 22:28:30
Probably a someone from that other cafe racer site.
www.caferacernet.com = a bunch of haters!!!

Considering that I help maintain the "other cafe racer site" and also come here to read this one, I feel that's unlikely.

If you hit escape during a page load, you could avoid the ad that loaded that trojan horse virus. the trojan in question is fairly common, and is linked back to russian sites.

Tim, I strongly urge you to consider an upgrade of your webserver software. The apache version you have is very outdated and vulnerable - I noted the version yesterday while you were fixing stuff. Don't know about your PHP version. Get on your provider to cowboy up and get that fixed.

 

[73750K]

To note, the redirect tries to install a Trojan. So ifyou landed on the other page I suggest doing a virus scan.

yup, I had to restore to a previous day, got spooked for a bit as those damn trojans can be a pain in the a$$ to compleyely get rid of.

 

[crazypj]

There is still a 'flash' of white screen but didn't seem to do anything.
Norton didn't flash a warning, I'll run a scan later.

PJ

 

[Tim]

I'll give GoDaddy a shout and ask about the versions of Apache etc. running on our server, but somehow don't think they'll be doing major upgrades for me.