Wednesday, July 17, 2013 12:18:53 AM
Dear Administrators
Your account was apparently compromised by a remote hacker, probably via your Wordpress package, and has been temporarily disabled. When we identify a customer account compromise, we must disable the site until the customer can resolve the problem. This protects all our customers from the potential impacts of the compromise.
Given that anonymous visitors have had unfettered access to your account for an unknown amount of time, you should audit your entire account and home directory for unauthorized files and/or modifications immediately.
You should immediately:
- apply any applicable vendor patches
- audit your Modwest account and delete any other unauthorized files
- change your account and database password
- if you use those passwords elsewhere, change them there too
- audit your code for unauthorized modifications
Specifically, your site was being used as part of a 'phishing' scam. Used to trick 'Citibank' customers out of their secure information. This was done via a malicious PHP file, which was uploaded to your account on Jul 5 at 1:13AM (MDT). Additionally, I see a large number of suspicious scripts in the /tmp directory of your account.
Please complete a full audit of your account content, and perform the suggested steps above.
When you tell us that these steps are complete and your account has been secured, we will be happy to re-enable the site.
Green Leaf Innovations, Inc. Engages Olayinka Oyebola & Co for Two-Year Audit • GRLF • May 28, 2024 8:30 AM
HealthLynked Introduces AI-Powered Chat Function to Enhance Healthcare Accessibility • HLYK • May 28, 2024 8:00 AM
Avant Technologies Engages Wired4Tech to Evaluate the Performance of Next Generation AI Server Technology • AVAI • May 23, 2024 8:00 AM
Branded Legacy, Inc. Unveils Collaboration with Celebrity Tattoo Artist Kat Tat for New Tattoo Aftercare Product • BLEG • May 22, 2024 8:30 AM
"Defo's Morning Briefing" Set to Debut for "GreenliteTV" • GRNL • May 21, 2024 2:28 PM
North Bay Resources Announces 50/50 JV at Fran Gold Project, British Columbia; Initiates NI 43-101 Resources Estimate and Bulk Sample • NBRI • May 21, 2024 9:07 AM