[BlueOnyx:05936] Re: hacker scripts

[webmaster]

>
>On Mon, 2010-11-29 at 17:27 +0000, Steve Howes wrote:
> > On 29 Nov 2010, at 17:23, Gerald Waugh wrote:
> > > On Mon, 2010-11-29 at 17:17 +0000, Steve Howes wrote:
> > >> On 29 Nov 2010, at 17:08, Gerald Waugh wrote:
> > >>> How can I stop these people from downloading and running their scripts
> > >>> in /tmp using httpd
> > >>
> > >> You need to find out how they did it. You're either hosting 
> someone naughty, or someone who has an insecure script. Who owns the files?
> > >>
> > >  apache.apache
> > >
> > > The server has a site with Drupal and some other blog stuff
> >
> > Please reply to the list, not me.
>
>excuse me but I hit 'reply' and did not look at 'To'




Google found lots of stuff

http://www.google.com/#sclient=psy&hl=en&site=&source=hp&q=IRAN+HACKERS+SABOTAGE+Connect+Back+Shell&aq=&aqi=&aql=&oq=&gs_rfai=&pbx=1&fp=573da4ec7e15bdf2