ARRRRRRRRRRRRRGH! 1

[gbaughma]

Just need to vent for a second.

Some low-life sorry &(@*&(%*&#@# hacked my Linux box today. I don't know how they got in.. it had to be through SSHD, or through a vulnerability somewhere.

Anyway... they changed my root password, created a root-level account for themselves called "Test", cleared out my log files so I couldn't track them down, and started a DOS attack on someone.

Now I can't even get the system to boot, and I'm going to have to re-install.

They'd better *HOPE* I never find them.



Just my 2¢

"In order to start solving a problem, one must first identify its owner." --Me
--Greg

http://parallel.tzo.com

 

[m4ilm4n]

Greg - did you run chkrootkit?

http://www.chkrootkit.org/

 

[marsd]

The lesson here is:

* Don't run stuff you don't know.
* Don't run things you don't monitor.
* Don't trust an internal monitor.
* Keep up to date on software you use.
* Audit software you use.
* Know what software you use.
* Always doubt.

All of this points to the long argued admin
assertion of singly dedicated hosts.
No Mileage Should Ever Vary.