Hacked - Security Expert Wanted!
I have been hacked and thought it was a simple password violtion. Moved account to a dedicated server, changed password, and looked in ALL directores for the files 'he' uploaded. Found a lot and I deleted them. Thought it was fixed.
The files he uploaded, that I found, were to be used to phish Eart***** accounts/credit card #.
Today I went in and deleted all ftp accounts then later on, I noticed I had a new one. I went to delete it and ANOTHER one was there. The accounts were:
[1st] ogs@aismarketing.com (/)
[2nd] MU1kCqeWaw1@aismarketing.com (/bin/ftpsh)
I have suspended the account but I do need it back so if you know of a security guy that can check it out, see if it's the cgis/php scripts and fix it please let me know.
MTIA
Garrie
PS
I can't get PMs so you can either rely here or email me at sales AT ais-usa.net.
