Warning, www.fedora-ve.org hacked

[Walter Cervini]

Today morning fedora-ve.org site was defaced by a stupid hacker Group.
The fedora Team Venezuela give our apologies for this problem,
The site will be off to solve this action for some days

[Juan M. Rodriguez]

2008/7/3 Walter Cervini <wcervini(a)fedoraproject.org&gt;:

>  Today morning fedora-ve.org site was defaced by a stupid hacker
> Group.
>  The fedora Team Venezuela give our apologies for this problem,
>  The site will be off to solve this action for some days
>
>
>
>
>
>
>
>  --
>  Fedora-ambassadors-list mailing list
>  Fedora-ambassadors-list(a)redhat.com
>  https://www.redhat.com/mailman/listinfo/fedora-ambassadors-list
>
>  
As I said on Irc, I'm willing to bet they got in via Joomla, as the site's
portal didn't look like it was updated in ages, they might have exploited an
old bug.

While It is indeed a shame that such a thing happened, I think this teaches
us a lesson in the importance of having all the software properly updated.
While I do not know for a fact that it was indeed hacked via Joomla, I stand
by my theory, as both http://blog.fedora-ve.org, and
http://wiki.fedora-ve.org still stand.

Keep us updated!
-- 
Ing. Juan M. Rodriguez Moreno
Desarrollador de Sistemas Abiertos
Sitio: http://proyectofedora.org/mexico

[Kushal Das]

On Thursday 03 July 2008 11:31:18 am Walter Cervini wrote:
>  Today morning fedora-ve.org site was defaced by a stupid hacker
> Group.
>  The fedora Team Venezuela give our apologies for this problem,
>  The site will be off to solve this action for some days 
We (http://dgplug.org) had
same kind of problem 1 year back.  Keep updating 
whatever CMS you are using.
Anyways, that song/music playing in the site sounds nice , no idea what it 
means though :(

Kushal
-- 
Fedora Ambassador, India
http://kushaldas.in
http://dgplug.org (Linux User Group of Durgapur)

[Saadaldine AlSaidi]

A group of "stupid *Turkish* so called hackers", and the music is a some
Turkish pride song. And  Don't let the Islamic or Arabic words fool you.
Hacking is like forbidden in Islam *especially* if the website is for the
better of humanity.

I hope you could fix the problem as soon as possible and try to be secure.


-- 
Saadaldine AlSaidi

IT Manager
AlShora International
Tayyouneh Rotary
Old Saida Road - Princess Buldg.
Beirut - Lebanon
Tel: [phone]
Fax: [phone]
Mob: [phone]

[Neo Reeves]

Is it the domain that got hacked or the hosting ?

2008/7/3 Saadaldine AlSaidi <omen(a)fedoraproject.org&gt;:

>  A group of "stupid *Turkish* so called hackers", and the
> music is a some
>  Turkish pride song. And  Don't let the Islamic or Arabic words fool you.
>  Hacking is like forbidden in Islam *especially* if the website is for the
>  better of humanity.
>
>  I hope you could fix the problem as soon as possible and try to be secure.
>
>
>  --
>  Saadaldine AlSaidi
>
>  IT Manager
>  AlShora International
>  Tayyouneh Rotary
>  Old Saida Road - Princess Buldg.
>  Beirut - Lebanon
>  Tel: [phone]
>  Fax: [phone]
>  Mob: [phone]
>  --
>  Fedora-ambassadors-list mailing list
>  Fedora-ambassadors-list(a)redhat.com
>  https://www.redhat.com/mailman/listinfo/fedora-ambassadors-list
>
>  

-- 
.:: BELIEVE THE UNBELIEVABLE ::.

["Guillermo Gómez S."]

Neo Reeves wrote:
>  Is it the domain that got hacked or the hosting ?
>
>  2008/7/3 Saadaldine AlSaidi <omen(a)fedoraproject.org 
>  <mailto:[e-mail]>>:
>
>      A group of "stupid *Turkish* so called hackers", and the music is
>      a some Turkish pride song. And  Don't let the Islamic or Arabic
>      words fool you. Hacking is like forbidden in Islam _especially_ if
>      the website is for the better of humanity.
>
>      I hope you could fix the problem as soon as possible and try to be
>      secure.
>
>
>      -- 
>      Saadaldine AlSaidi
>
>      IT Manager
>      AlShora International
>      Tayyouneh Rotary
>      Old Saida Road - Princess Buldg.
>      Beirut - Lebanon
>      Tel: [phone]
>      Fax: [phone]
>      Mob: [phone]
>      --
>      Fedora-ambassadors-list mailing list
>      Fedora-ambassadors-list(a)redhat.com
>      <mailto:[e-mail]>
>      https://www.redhat.com/mailman/listinfo/fedora-ambassadors-list
>
>
>
>
>  -- 
>  .:: BELIEVE THE UNBELIEVABLE ::.
>  ------------------------------------------------------------------------
>
>  --
>  Fedora-ambassadors-list mailing list
>  Fedora-ambassadors-list(a)redhat.com
>  https://www.redhat.com/mailman/listinfo/fedora-ambassadors-list
>     
Just the joomla cms

AW: Warning, www.fedora-ve.org hacked

[GRAMS, CHRISTIAN]

It would be interesting (for me anyway as IT-Security Specialist) to see the server logs. 
Any possibility of posting them here for the time of the hack +/- 15 Mins? 

And any logs concerning the Joomla / Site that got hacked – if it has any specialized
logs.

 

Regards

Christian

 

Von: fedora-ambassadors-list-bounces(a)redhat.com
[mailto:[e-mail]] Im Auftrag von Walter Cervini
Gesendet: Donnerstag, 3. Juli 2008 08:01
An: Fedora Ambassadors
Betreff: [Ambassadors] Warning, www.fedora-ve.org hacked

 

Today morning fedora-ve.org site was defaced by a stupid hacker Group. 
The fedora Team Venezuela give our apologies for this problem,
The site will be off to solve this action for some days

[Santosh Kumar]

I second this... do check the change logs of scripts... and check to see if
your hosting provider has any logs to share with you... Do forward it to
us.. I know something for sure about forensics after working on my own
servers and maintaining them for sometime now...

Santosh
2008/7/3 GRAMS, CHRISTIAN <CGR(a)hud.de&gt;:

>   It would be interesting (for me anyway as IT-Security Specialist) to
> see
>  the server logs.  Any possibility of posting them here for the time of the
>  hack +/- 15 Mins?
>
>  And any logs concerning the Joomla / Site that got hacked – if it has any
>  specialized logs.
>
>
>
>  Regards
>
>  Christian
>
>
>
>  *Von:* fedora-ambassadors-list-bounces(a)redhat.com [mailto:
>  fedora-ambassadors-list-bounces(a)redhat.com] *Im Auftrag von *Walter
>  Cervini
>  *Gesendet:* Donnerstag, 3. Juli 2008 08:01
>  *An:* Fedora Ambassadors
>  *Betreff:* [Ambassadors] Warning, www.fedora-ve.org hacked
>
>
>
>  Today morning fedora-ve.org site was defaced by a stupid hacker Group.
>  The fedora Team Venezuela give our apologies for this problem,
>  The site will be off to solve this action for some days
>
>
>
>
>
>
>  --
>  Fedora-ambassadors-list mailing list
>  Fedora-ambassadors-list(a)redhat.com
>  https://www.redhat.com/mailman/listinfo/fedora-ambassadors-list
>
>

[Francesco Ugolini]

2008/7/3 Walter Cervini <wcervini(a)fedoraproject.org&gt;:
>  Today morning fedora-ve.org site was defaced by a stupid hacker
> Group.
>  The fedora Team Venezuela give our apologies for this problem,
>  The site will be off to solve this action for some days
>
>
>
>
>
>
>
>  --
>  Fedora-ambassadors-list mailing list
>  Fedora-ambassadors-list(a)redhat.com
>  https://www.redhat.com/mailman/listinfo/fedora-ambassadors-list
>
>  
That's a bad news, hoping it would be visible in the next days.

Best regards

Francesco Ugolini

["Guillermo Gómez S."]

Francesco Ugolini wrote:
>  2008/7/3 Walter Cervini <wcervini(a)fedoraproject.org&gt;:
>    
> > Today morning fedora-ve.org site was defaced by a stupid hacker Group.
> > The fedora Team Venezuela give our apologies for this problem,
> > The site will be off to solve this action for some days
> >
> >
> >
> >
> >
> >
> >
> > --
> > Fedora-ambassadors-list mailing list
> > Fedora-ambassadors-list(a)redhat.com
> > https://www.redhat.com/mailman/listinfo/fedora-ambassadors-list
> >
> >
> >     
>
>  That's a bad news, hoping it would be visible in the next days.
>
>  Best regards
>
>  Francesco Ugolini
>
>  --
>  Fedora-ambassadors-list mailing list
>  Fedora-ambassadors-list(a)redhat.com
>  https://www.redhat.com/mailman/listinfo/fedora-ambassadors-list
>     
The old site is out (joomla), but a new experimental Typo (some months 
old) blog engine is up now receiving the http://www.fedora-ve.org traffic.

Guillermo