Well, after lots of totally innefectual email from the
hr support people (and hr support used to be so
good), we’ve finally figured out what’s wrong with
wolf’s site. Apparently, using a
known exploit in Greymatter (piece of shyte that it is) and
PHP, someone uploaded a
PHP-based shell program to her /archives folder at
Tercel, the used
that to download and install what looked like an IRC bot spamming thingie (psybnc)… all without her knowing.<br />
<br />
For some reason I don’t even begin to fathom, she couldn’t delete the offending phpshell-1.6 directory via
FTP. So, in a great show of klugieness, issued a quick <tt>rm phpshell-1.6 -r</tt> to the program itself and
voila, no more bot. Stupid little script kiddy’s gonna need to find someone else to pick on.<br />
<br />
But yeah, for all you people who use Greymatter,
beware! At this very moment, hax0rs are scoping out your blog to do their illegal mojo-jojo on! Wooooo! [makes more scary noises] To avoid being dragged kicking and screaming into solitary confinment like the little Kevin Mitnicks that you are, I suggest you all upgrade to
b2 right now! <br />
<br />
[/pimping]<br />
<br />
[b]Listening :
/b] Stone Temple Pilots, “Plush”