Red-D3v1L Hack

[batu544]

Hi All-
              couple of days back when I tried to login into my website as a admin, it suddenly stopped taking my password and when I requested a new password then I didn't get the new password.. So, I checked my database and got to know that my e-mail id and password has been changed. I think this is a some kind of hack.

   Today while searching my site name in google I noticed my website name is also in this list..  http://www.zone-h.org/archive/ip=72.29.71.175   

I finally deleted index.htm file from bhwallpapers.com/wall   folder.

No idea how and why this happened .. Is this happened due to some security hole in 4image. ?

I am still using 1.7.4


Thanks
batu544

[V@no]

1) did you apply ALL bug fixes for your 4images version?
2) did you check your webspace for any suspicious files (files you didn't upload)?
3) did you contact your host administrator for help investigate this?
4) what was in index.htm file?

[batu544]

1) did you apply ALL bug fixes for your 4images version?
2) did you check your webspace for any suspicious files (files you didn't upload)?
3) did you contact your host administrator for help investigate this?
4) what was in index.htm file?

Hi,
     
1. Not all but I have applied few fixes...
2. no, I didn't find any suspicious file except index.htm
3. No, I have not contacted yet..   I simply changed the e-mail in the database and requested a new password.
4. I can't remember exactly all the sentences .. but   it was something like " you website has been hacked by Red-D3v1L mR5@Hotmail.com....etc etc.. "


Thanks