ARTeam's site hacked

[Shub-Nigurrath]

What the hell our site has been defeated by a lamer group.

There's no more respect for honest crackers which do their job "honestly"..these stupid lamers attack anything has a little probability of being hacked, without worrying of what are they attacking!

Lamers of the situation are: http://www.c0d3rz.org/

blame on them!

[hosiminh]

Here is their "achievement"

hope that admins will fix this soon

[Shub-Nigurrath]

just for info: we already have the whole backup, waiting for understanding what happened..then we'll be back.

Anyway according to Zone-H yesterday happened a lot of things and these guys did a lot of other incursions... http://www.zone-h.org/en/news/read/id=3024/

The question I'm wondering about now again, since the defacing of ollyforum and of all the other hacking forums, why to bother ppl on the same side of the barricade!?

[redbull]

The c0d3rz Team (www.c0d3rz.org) have been around for a good few years ... They aren't really lamers.... I remember they have released many many yummy exploits... I am not excusing what happened to you and other sites ....

Did they use your forum to get in or another method ?

[Shub-Nigurrath]

I know they are not newbies and the term "lamer" is referred to the use they do of their exploits..being technically expert doesn't imply being "smart," coz it seems like they're indiscriminately attacking sites without paying attention to what a site is.

IMHO a cracking site/forum shouldn't ever be defaced, simply because is no sense, like cracking an opensource software: which is the concept they are trying to demonstrate? To be the simply a group of good script kiddies? A war against corporates or copyright or whatever commercial/politics concepts? It seems to me the first one and it's not so intelligent IMHO...anyway this is only MHO

Anyway they used a known PHP recent exploit in forum's sw to get into.

[redbull]

Yeah i dont know what their motives are and it is very pointless.....

Also defacing sites for the sake of defacing is not smart, but they could have just had an automated tool to do the hacking for them.. So it scanned for vurable servers (from google or something) and jsut auto-hacked you...

Did they leave backdoors or anything behind ??

[Shub-Nigurrath]

I really don't know: we are hosted on a commercial ISP, so I have access to anything more than my account...

I hope you guys get your stuff up and running again soon, hacking/defacing a site just because you know howto or because you have the tools is indeed lame imho.
If you deface a site with the purpose to make a statement or something like that, i can partial understand it but dont destroy a whole site, just make a small banner with your statement or something like that.

[Shub-Nigurrath]

well,
we collected enough information to do some countermeasures (hope ) and we are now back online with both forum and site.
have phun