Advertisement
Help Keep Boards Alive. Support us by going ad free today. See here: https://subscriptions.boards.ie/.
If we do not hit our goal we will be forced to close the site.

Current status: https://keepboardsalive.com/

Annual subs are best for most impact. If you are still undecided on going Ad Free - you can also donate using the Paypal Donate option. All contribution helps. Thank you.
https://www.boards.ie/group/1878-subscribers-forum

Private Group for paid up members of Boards.ie. Join the club.

Digiweb Servers hacked?

  • 22-02-2010 09:53PM
    #1
    Registered Users, Registered Users 2 Posts: 495 ✭✭


    I received an email from a friend telling him that several websites hosted by Digiweb has been hacked via an exploit entitled "Martuz". I was wondering if anyone else has been alerted of this breach in security and possible ways to avoid this.
    Thanks


Comments

  • Closed Accounts Posts: 20,759 ✭✭✭✭dlofnep


    It's gumblar in a nutshell. One of the biggest annoyances of 2009.


  • Moderators, Home & Garden Moderators, Technology & Internet Moderators Posts: 24,790 Mod ✭✭✭✭KoolKid




  • Registered Users, Registered Users 2 Posts: 139 ✭✭{^Syntax^}


    Nothing new... web7.novara.ie (Digiweb) had thousands of infected sites last year. This was the culprit: adsttnmq1sdioyslkjs2 attack

    Digiweb denied it was a vulnerability in hSphere.


  • Registered Users, Registered Users 2 Posts: 22,227 ✭✭✭✭Sparky


    Its an FTP attack that is going around the internet at the moment and not specific to any hosting company. Hence why Hsphere logins are not affected. Its only FTP credentials that are stored in software like filezilla, cuteFTP dreamweaver etc. And yes apple computers are affected too, as its not an OS specific attack either.
    Digiweb/Novara has FTP accounts monitored for suspicious activity, hence why clients are getting this email and their passwords changed. Many other people on various hosting companies around the globe may not know yet that their FTP account was compromised again, only until their pages get changed by the attackers and then blocked by google.
    It may be an annoyance to have details changed, but this reduces the attack spreading again like it did last year.


Advertisement