View Single Post
Old 04-16-2010, 03:26 PM  
sortie
Confirmed User
 
sortie's Avatar
 
Industry Role:
Join Date: Mar 2007
Posts: 7,771
Quote:
Originally Posted by mmcfadden View Post
I just got a new server last month with way more capacity then required. How could individual files within my cgi-bin folder just randomly change permission settings... that's huge. Like I said the htaccess within /members was also changed... last update was 4-9-10. Everything points to a hack... or should I say direct intent to fuck my site up, but I do not understand how this person is making any money off it. One thing for sure is sales are outlandishly slow, but when I contacted CCbill yesterday they said there is no way for a sale to even go through with permission settings not matching theirs.

It's like files for the past 3 weeks have been uploaded, deleted, re-uploaded to take the sales but cannot understand how they could get a processor to take the sales.

There was a 30 member discrepency in my password file with the changed permission settings.
The hack doesn't stop you from making normal sales.

Why do this? Password trading!!!!

The hack will load passwords into your file but it will not show up as a sale
from ccbill. Sales from ccbill will still go thru; but if your site is all over the
password trading sites then the surfers are using that instead of signing up.
Therefore signups are down.

I'm not claiming 100% this is happening; just saying from knowledge of working
with the system and my programming background that this is a very strong possibility.
__________________
sortie is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote