keithlaney.net hacked

[Rex]

http://keithlaney.net

http://projectavalon.net/forum4/attachment.php?attachmentid=31004&d=1441040994

[spacejack]

I have experience with these hackers. I bet its a wordpress site and they can just reupload an original index.php file and it will work. Probably a theme or plugin vulnerability.

¤=[Post Update]=¤

Just to clarify - if the site owner reuploads an original index.php file (https://github.com/WordPress/WordPress/blob/master/index.php) it will remove that hacked page.

[Rex]

Keith's direct link to the forum is not found as well: http://keithlaney.net/THMF

So it seems a little more than the index page change?

update:

I forgot he has the forum under a different domain and it seems to be unaffected: http://thehiddenmission.com/forum/

[spacejack]

Depends how they have it setup, but usually they just replace the index.php and that effects mostly everything from there. Sometimes they replace your htaccess file which can make things download, redirect pages, etc.

But almost always they dont actually have access to anything. Usually its only the ability to upload a file but they cant read any files.

[Rex]

All better now...