Re: [Full-disclosure] Files keep appearing

[<0x80@xxxxxxx>]

You've been owned

On Thu, 01 Jun 2006 21:08:54 -0700 Stephen Johnson 
<maillists@xxxxxxxxxxxxxxxx> wrote:
>I keep having a phishing website appear on my web server.
>
>They keep showing up in a Resources folder of one of the sites 
>that I host.
>I have gone through the logs and I am not seeing any connections.  

>I deleted
>the files this morning and this evening they re-appeared ‹ no 
>connections
>were made on my server during that period of time.
>
>Also, there are no cron jobs that I noticed that looked out of the 

>ordinary.
>
>I am running MySQL, PHP, Apache2 on a debian linux server.
>
>Any thoughts? 
>
>-- 
>Stephen Johnson
>--



Concerned about your privacy? Instantly send FREE secure email, no account 
required
http://www.hushmail.com/send?l=480

Get the best prices on SSL certificates from Hushmail
https://www.hushssl.com?l=485

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/