We are in the process of migrating this forum. A new space will be available soon. We are sorry for the inconvenience.

Server hacked


nowwhat
16/05/2016, 16h08
Citation Envoyé par carperolm
....
I had the backups in the same server, so I don't have anyting!
You never had something to begin with.
Normally, disk die - they do that all the time. Taking your backup with it.

btw : as said : mount your (and read about it first) partitions and clean out ....
Also : ask your client to forward urgent matters.

janus57
16/05/2016, 14h49
Hello,

you are in rescue mode, so you need to mount the HDD to see the contents.

P.S. never backup on the same server

Cordialement, janus57

carperolm
16/05/2016, 10h02
Hello,

I have a kimsufi server for a client with cpanel + joomla. He received a phishing attack last week and yesterday I receive a email form OVH ABUSE telling me that "we are forced to put your service offline to stop the abuse." and the server appears in kimsufi panel as "hacked" I receive another email with a ssh provisional access and when I login the servers looks like a new installation. No code inside. No webs inside...

Could anyone help me please!

I had the backups in the same server, so I don't have anyting!

Please help me