Core breach
Originally published at Disjunction. You can comment here or there.
There’s nothing like starting the day with a notice from your web host stating that your server is being used to launch malicious attacks and you better get it cleaned up quick or the server will be taken offline.
It’s cleaned up now. The attacker used a vulnerability in an old version of Nucleus that I had installed and was using for Gareth’s blog. I’m all up to date now.
It was a good reminder, though, that I need to make sure the rest of my sites are patched up. Looks like I have a weekend project.
Interestingly, I discovered stashed copies of the A-Team and Smallville in DivX format in the folders created by my intruder. Seriously… who cracks a site to store A-Team episodes? That’s just stupid.