Hi,

I woke this morning to find one of my DNN2 servers hacked by NobodyCoder from Iran. About 20 customers in total.

Luckily, on further investigations, the hacker has not done as much damage as he could have done.

He basically deleted all the files in the root directory and replaced them with files calling for an end to the war between Israel and Palestine. When I say he didn't do as much damage as he could have, I mean that he didn't delete any directories, only files in the root.

So, I now need to find out how it happened.

I have trawled the internet and come accross a posting, http://www.betterhumans.com/blogs/simon/archive/2006/05/01/The-hack.aspx , where he says that if he didn't have write permissions, he would not have been able to perform the hack.

So, in your opinions, do you think he managed to hack DotNetNuke or has he hacked the platform?

Personally, I think he hacked the platform as the second he would have deleted default.aspx and replaced it with his own, he would have lost DNN.

Anyone else been hacked by this guy recently?

Thanks

Trev

Latest Update.....

Looks like getting hold of a Dreamweaver username and password is not difficult....

check this out.... http://www.apptools.com/password.php

Trev

Yes, saved passwords are EVIL!  If you're not going to require the user to key it every time, then what's the point??? 

Because U & P is so easy to brute force, and because sadly it's become common--yea even expected/required by lazy users--to save passwords....well the US government is now requiring all US financial institutions to implement multi-factor authentication (U & P plus PIN, last statement balance, biometric scan, etc)...  I just wonder hong long it'll be before lazy users circumvent even those.  Then all of us (even those of us too smart to save passwords) will have to suffer another round of complications to do menial tasks.