Email Marketing Software for your Mailing Lists - Re:Hacked server running acajoom news 2.0.6 and joomla 1.0.15

JayW
User

Expert Boarder

Posts: 26

Karma: 2

Hacked server running acajoom news 2.0.6 and joomla 1.0.15 - 2008/07/03 17:23 I just had an account get hacked that was running joomla 1.0.15 and acajoom news 2.0.6

I *think* it was a vulnerability in acajoom news but can't be sure.

I removed the files they dropped on the site (they were sending spam email), blocked the offending IPs plus all of africa, asia, eastern europe and most hosting datacenters.

I have the logfiles showing the http POSTS if someone from acajoom wants them.

damn. . .

-jay

| | To post on the forum you need to sign in.

kornikopic
User

Platinum Boarder

Posts: 661

Karma: 11

Re:Hacked server running acajoom news 2.0.6 and joomla 1.0.15 - 2008/07/03 21:10 Hello Jay,

I looked your logfile.

Acajoom appear only 5 times in the log and the date is 30th June.

The hack is from today, we are the 3rd July. So I'm sure it isn't Acajoom. *** Please, read our official documentation before posting. Thank you ***

Best regards,
Jonathan

| | To post on the forum you need to sign in.

JayW
User

Expert Boarder

Posts: 26

Karma: 2

Re:Hacked server running acajoom news 2.0.6 and joomla 1.0.15 - 2008/07/04 09:26 kornikopic,

You are 100% correct - I jumped the gun.

Acajoom IS NOT THE PROBLEM!

I think I found the culprit and have taken appropriate action.

Sorry for the distraction - I have no excuses other than panic.

Thanks!

-jay

| | To post on the forum you need to sign in.

kornikopic
User

Platinum Boarder