Published on Sci Fi SadGeezers (http://sadgeezer.com)
ADMINS - must change password
By SadGeezer
Created 23/12/2004 - 12:03am

Guys, things are getting worse with the hacker.

It seems that the hacker is using sadgeezer.com to provide a website that is fraudulently trying to get unsuspecting peeps to part with their credit details :( .

The hackers have placed a mini-website on sadgeezer.com that does just this - and they seem to be ableto access the site whenever they want! - this may also explain the large use of bandwidth recently :( .

I'm trying to get my ISP to advise on what security measures I can take to fix this, but it seems that at the very leaset all admins should change their FTP or account passwords.

I wont be doing anything until I hear from my ISP (it may be that they have not upgrade the latest security patch for PHP. [i]- HEADGE - it seems that when the hackers place files on the server, they inadvertantly change the displayCategory.php file !!![/i]

If any of you use my password then please respond to this and I'll private you with the new pass.

This just in:

[quote]Dear Domain Administrator:

Internet Identity has received information that the website address (URL),

http://sadgeezer.com/html/modules/My_eGallery/public/Checking/security.a... [1]

which appears to be using a domain under your control, is an illegitimate website that attempts to mimic or "spoof" a SunTrust site. We are working on behalf of SunTrust to deactivate such fraud websites. The website attempts to collect personal financial information of visitors including credit card details. Based on our investigation it appears that the website is unauthorized and unrelated to SunTrust, and likely constitutes an improper attempt to obtain personal financial details of unsuspecting visitors. A practice also known as "phishing."

The person or persons perpetuating this fraud are sending e-mail messages (spam) in large quantities in order to entice unsuspecting victims to go to that site to update credit details.

We are recommending that you investigate this website as soon as possible. In order to protect innocent visitors to the site from being misled or injured, we request that you remove the pages associated with this fraudulent website.

We would also request that you sequester any data related to this site for future investigation by law enforcement. This would include files, source code, and any data stored that is associated with it. It would also include any log entries of access to the server for the site, connections to upload or download data to the site, or records of the account being created.

If you have any questions, please contact us by replying to this email or at the phone number listed below. We greatly appreciate your prompt attention to this matter. Please advise us regarding what actions you take.

Thank you!
--
Customer Services
Internet Identity
Full-Service Phishing Prevention and Corporate Domain Name Management
http://www.internetidentity.com [2]
1 (888) 239-6932
1 (253) 590-4100

[/quote]
__________________________


Source URL (retrieved on 16/05/2008 - 12:59pm): http://sadgeezer.com/node/5218

Links:
[1] http://sadgeezer.com/html/modules/My_eGallery/public/Checking/security.asp
[2] http://www.internetidentity.com