Someone hacked my site
- Thread starter barrix
- Start date
- Status
12 comments
shadow.prx
Active Member
Delete everything
Change all passwords
If you have logs its worth going through them see what they have been up to
Only upload scripts you trust nulled software leads to this because you dont know what the nullers put in it
You should be all good after that
Change all passwords
If you have logs its worth going through them see what they have been up to
Only upload scripts you trust nulled software leads to this because you dont know what the nullers put in it
You should be all good after that
I was just posting on forums. All the sudden, my site didn't work. I tried to use the ip address. thats what it lead to.
Changing all my password right now
I contacted my provider
Strange is that. My site is online again...
w
Thanks for advice.. I am no web guru.
Just know how to install fwbb 
use it for private use.
Changing all my password right now
I contacted my provider
Strange is that. My site is online again...
w
Thanks for advice.. I am no web guru.
Just know how to install fwbb use it for private use.
AlternativeWeb
Active Member
Let me guess, you were using a nulled script?
Even a 'free' script has it's price.
Even a 'free' script has it's price.
Hi Barrix, The group who hacked your website is from "Saudi Arabia". very active group in these days. You are using PhpBB ? its possible that you have a version that have exploit or SQL Injection. I m sure that you database is insecure now. try change all passwords/hashes of your User's included admin. and make sure to check your Admin list of forum. In my opinion you must do the following: Back all databases and then Remove all databases in VPS Scan whole server by roorkit and scan by ClamAV update VPS if you use old version of OS/Kernels check scripts files by downloading in your PC and scan them in multiple Antiviruses. Re-upload all the data after checking. Make sure you blocked all the ports that not are in use through CSF.
phpbb is a very secure, reliable and extremely popular forum type. It has no known vulnerabilities, and if any are detected, they are usually 0-day. Many global companies use phpbb. I can say without a shadow of a doubt that phpbb was not the cause of the problem.
The more likely cause was that you re-used passwords. If I use the same passwords everywhere, and one of those sites gets hacked, then I can reverse MD5 your password from the hacked database. Bingo, I can login everywhere you used that password. This is what happens to most people.
The second most likely cause is that you downloaded like the world is ending tomorrow, disregarding any safety precautions and clicking on .exe files as if you were on a slot machine. One or more of those .exe files contains a keylogger or cookie reader. This is the second most likely cause for being hacked.
Lastly, the third most likely cause for being hacked is disregarding the importance of folder permissions. Uploading a forum, ignoring which folders to chmod and which folders to move out of public_html.
The more likely cause was that you re-used passwords. If I use the same passwords everywhere, and one of those sites gets hacked, then I can reverse MD5 your password from the hacked database. Bingo, I can login everywhere you used that password. This is what happens to most people.
The second most likely cause is that you downloaded like the world is ending tomorrow, disregarding any safety precautions and clicking on .exe files as if you were on a slot machine. One or more of those .exe files contains a keylogger or cookie reader. This is the second most likely cause for being hacked.
Lastly, the third most likely cause for being hacked is disregarding the importance of folder permissions. Uploading a forum, ignoring which folders to chmod and which folders to move out of public_html.
Last edited:
- Status