Third deface attack ...

[Sc0rps]

Helo all ,

am desespered... its the third time who i got defaced by a hacker in one week ... :'( . every day , i work hard to restore all , back up + db ... and after , someone deface me i don't know how ...

i work hard to arrive to get a big forum and now all my project and dreams will be broken ....

so please, someone can help me to fix this probleme and secure me my server ?

thanks alot and alot ...

 

[Dakota Storm]

Contact your host, change your passwords, make sure you're not running out of date or insecure add-ons.

 

[Brad Padgett]

I really suggest cPanel/WHM as control panels. Also be sure to install the CSF firewall. You don't need cPanel to have it I don't think but it's a free firewall for websites. I'd look it up.

 

[Sc0rps]

thansk for your responses .. i juste got a 4th attaque and they deleted all my ftp .. !!!

someone please can help me to secure ?

 

[shabbirbhimani]

Changing the passwords won't be enough and it may be that they have some malicious files in your server. So a restore and other stuff may not help and you have to close all the backdoors as well. If you want me to look into it, will be more than willing to do it.

 

[Sc0rps]

Changing the passwords won't be enough and it may be that they have some malicious files in your server. So a restore and other stuff may not help and you have to close all the backdoors as well. If you want me to look into it, will be more than willing to do it.

Its really nice from you . Possible de PM me you discord if have or skype ? more easly talk (texte) ^^

 

[shabbirbhimani]

Its really nice from you . Possible de PM me you discord if have or skype ? more easly talk (texte) ^^

Yes I do use Skype and has shared my Skype ID with you.

 

[Sc0rps]

thanks

 

[Sc0rps]

no one can help me ? ..

 

[ForumCube]

Previous responses pretty much pointed out toward all things that you need to do.

If the issue is not resolved yet and you're looking for professional help, feel free to start a private conversation with us.

 

[ŽivaAkcija]

no one can help me ? ..

change host and help your self

 

[Dakota Storm]

Your files may be compromised, delete them and upload a fresh install. Change all your server passwords.

And make sure your host knows what is going on, they may be able to help

 

[Sc0rps]

Your files may be compromised, delete them and upload a fresh install. Change all your server passwords.

And make sure your host knows what is going on, they may be able to help

i juste do this but i don't arrive to restaure the database ... (500mb) . that why i need help to get exactly the same forum as befor (with my backup)

 

[Dakota Storm]

And if the backup was taken after the site was compromised, you'll be in the same position again

 

[Sc0rps]

And if the backup was taken after the site was compromised, you'll be in the same position again

and what the solution ? ...

 

[Slavik]

and what the solution ? ...

Take the site offline and firewall via whitelist only to your IP.

Create a new xenforo install.

Perform a xenforo to xenforo import. Leave everything behind except what is imported by xenforo and known to be safe/clean.

Get a new, secured server set up.

Move your now known clean xenforo to your new server.

Ive done this for several people in the past, hit me up if you want a quote.

 

[Sc0rps]

Take the site offline and firewall via whitelist only to your IP.

Create a new xenforo install.

Perform a xenforo to xenforo import. Leave everything behind except what is imported by xenforo and known to be safe/clean.

Get a new, secured server set up.

Move your now known clean xenforo to your new server.

Ive done this for several people in the past, hit me up if you want a quote.

Pmed you bro

 

[Sc0rps]

I did all this steps but i have a fatal error of all my forum ... (when click forum , bouton , connexion, ...) i don"t understand why ... :'(

http://prntscr.com/hs8zze

 

[Robust]

By this point, this really falls under general XF troubleshooting.

Additionally, you're going to run into the same problems again if you don't secure your server.

 

[Sc0rps]

they juste attacked me 5th time .... i juste opened and was happy befor 2 hours and juste attacked me again and defaced me and deleted all ftp .. !!!!

i think after long analyse , they used cookies to log on my admin account and do all that ...

someone have please à solution ? !!!

i really think that they injected hide several shell on my ftp in the past :'( ... can i please have a solution to fixe this hiden shells and secure it ? ..