Web Hosting Service Daily Hacked, Clients Websites Defaced With Cartoon Penguins Image
UK-based web host Daily has largely restored services following an apparent hack attack on Thursday that replaced content on some sites it hosts with pictures of cartoon penguins. Every file that included ‘index’ and ‘php’ in the name, including those invisible to Google, were defaced.
The images of Linux penguin Tux parodied the ‘hear/see/speak no evil’ monkeys”. Text included on the defacements claimed the hack in the name of ‘Heart_Hunter – TH3_H4TTAB’.
Customers were advised to restore their sites from back-up copies. Daily has begun an investigation into the attack, which bears the hallmarks of a mass defacement. Groups of websites are regularly defaced by TH3_H4TTAB, as defacement archive Zone-H records. In many cases eastern folk music is uploaded onto compromised sites.
A status page on Daily’s status site (http://www.dailystatus.co.uk/) explains: “We have received reports this [Thursday] morning of a small number of customer websites having their index or start page replaced with an image and in some cases text as well.”
The host completed the restore process by 21:00 on Thursday. Daily modified its PHP build as a security precaution. Services were largely restored on Friday but may proceed more slowly than possible after some servers were taken offline in order to mount an ongoing security investigation, a status update from Daily explains:
We are confident there will be no repeat events as all servers are locked down.
Some websites (in particular Database driven sites) will be running at slower speeds as we have taken some web servers from our cluster to carry on with our investigations and diagnosis.
Credit: The Register
More on CyberInsecure:
Posts
Leave a Reply
Comments with unsolicited links to other resources will be marked as spam. DO NOT leave links in comments. Please leave your real email, it wont be published.