[_] the worst morning of my life!!!
Sam Mignano - Analyst
sam at beyondmetrix.com
Fri Sep 29 15:34:31 BST 2006
Well I guess it was bound to happen one day and that day happened to be
today.
My server was hacked this morning :(
It was used to send out a gajillion phishing emails.
I only knew about it when I tried to download mails this morning and
found I have over 17,000 waiting for me. As nice a person as I am I
figured I didn't grow in popularity that much since yesterday - and then
the whole nightmare unfolded!!
Rackspace managed to catch him in the server and get a fair amount of
info etc (from Romania apparently) - he exploited apache and had various
things running - bash, telnetd, getty and an IRC connection - thankfully
he didn't have root but the little b*stard has with his phishing project
got my server blacklisted too from sending mail - even to my own
customers GRRRRRRRR
Anyway - my question is - has anyone ever reported such things to the
police - or am I being naive here.
I wondered if there was a particular department who deals with it cos I
can just imagine being put through to Knowle police station "ello ello
ello wot av we got yere den, a serrrrverrrrs been hacked you say - to
send out a gurt load of fishin emails? Ere Burt you like fishin dont
you?"
Rackspace don't prosecute - or so I am told.
I cant believe this little f*ckwit is gonna get away with it and no-one
even bothers to even *try* and do anything?
:(
Sam
Beyond Metrix
<http://www.beyondmetrix.co.uk/> www.beyondmetrix.co.uk
today.
My server was hacked this morning :(
It was used to send out a gajillion phishing emails.
I only knew about it when I tried to download mails this morning and
found I have over 17,000 waiting for me. As nice a person as I am I
figured I didn't grow in popularity that much since yesterday - and then
the whole nightmare unfolded!!
Rackspace managed to catch him in the server and get a fair amount of
info etc (from Romania apparently) - he exploited apache and had various
things running - bash, telnetd, getty and an IRC connection - thankfully
he didn't have root but the little b*stard has with his phishing project
got my server blacklisted too from sending mail - even to my own
customers GRRRRRRRR
Anyway - my question is - has anyone ever reported such things to the
police - or am I being naive here.
I wondered if there was a particular department who deals with it cos I
can just imagine being put through to Knowle police station "ello ello
ello wot av we got yere den, a serrrrverrrrs been hacked you say - to
send out a gurt load of fishin emails? Ere Burt you like fishin dont
you?"
Rackspace don't prosecute - or so I am told.
I cant believe this little f*ckwit is gonna get away with it and no-one
even bothers to even *try* and do anything?
:(
Sam
Beyond Metrix
<http://www.beyondmetrix.co.uk/> www.beyondmetrix.co.uk