Hacker Activity Help needed.

Over the past couple of days we experienced hacker activity on our servers. It appears they are using a root kit described here http://www.hackinthebox.org/article.php?sid=5724.

We reinstalled OS on affected servers from scratch and changed the passwors but they found their way back in. Needless to say this is costing us a lot of money and more importantly could compromise our user's data, thankfully latter did not happen yet. Do any of you know of an effective and quick way to combat the type of hack and secondary on how to track down who is causing this problem.'

Thank you for your help.

 

 

 

 

Top