Server Being Hacked - All index pages were overwritten

We face a problem that one of our server was hacked, all sites' index pages were overwritten. As a result the content of the index pages were all changed and pointed to a page. How can a linux box with Cpanel happen? Anyone can help and give solution?

Cpanel Support claimed that we should refer to the NOC, however the NOC reply is disappointing. Please see below:

Our linux server was hacked. All the index page of every site are changed. For example www.wehost.com will redirect to kadazandusun.net. We have raised a report to Cpanel and below is the feedback.

We can not provide any technical support regarding hacked servers. This is something you should direct to your NOC. You should at least, however, see where each domain is resolving (to what IPs) and then check to make sure that the zonefiles for each domain are correct and restart bind. In the meantime though, I highly suggest talking to your NOC or system admin if you believe your server has been hacked.
--
Eric Gregory
cPanel Support Staff
Berwick, PA Office

------------------------------------------
(bsykes-01/29/04-12:04):
You have a couple options with this. You can purchase admin hours, and our security staff can do an audit on this. However they most probably will suggest an OS Reload due to the fact that if the server was hacked, none of the OS files can be trusted anymore. The charge for this would be $75.

Please let us know how you would like to proceed.

 

 

 

 

Top