We have a site hosted with Dreamhost. We run a fairly popular forum that got hacked yesterday. When users go to it there is a bunch of pop ups, redirects, etc... I notified Dreamhost and during my investigating i found several of the files that were uploaded, a phpremoteview file, and other items. I had a intrusion expert take a look at all the files I found and he said the server was comprimised and the hacker has elevated permission to the server and it should be taken off line ASAP. I got a response 20 hours later from Dreamhost and they are "looking into it". I believe the server is rexford, so if you are on it I would be safe. Waiting on an update from Dreamhost
|