[support] Hacked or not

[steven at vermoere.net]

Hello,

Meanwhile, the password has changed.

But I have a freakier issue:

I checked the other websites that I have and they all have the same problem.

They are however all at other hosting companies. All usernames and
passwords are different and are composed of random characters (capitals,
numbers, non-capitals).
All Drupalversions are also different (1 most recent, other one 5, another
one 6)
I find it difficult to believe that all sites are hacked at the same time,
with all different hosters at different locations.

Strange

> steven at vermoere.net ha scritto:
>> Hello,
>>
>> I've encounterd a strange problem.
>>
>> One of me sites has a changed index.php. The date of the file changed
>> and
>> the following lines were added at the end of the file:
>>
> Ok. Change the user's password that you use to connect to the server.
> If you are in hosting contact your provider and report this hack.
> If you are in housing and you use ssh to connect to the server with the
> same user, you server could be compromise. Do a check.
>
> M.
>
> --
> Michel 'ZioBudda' Morelli                       michel at ziobuddalabs.net
> Sviluppo applicazioni CMS DRUPAL e web dinamiche (LAMP+Ajax)
> Telefono: 0200619074
> Telefono Cell: +39-3939890025 --  Fax: +39-0291390660
>
> http://www.ziobudda.net                         ICQ: 58351764
> http://www.ziobuddalabs.it                      Skype: zio_budda
> http://www.ziodrupal.net       			MSN: michel at ziobuddalabs.it
> 						JABBER: michel at ziobuddalabs.it
>
> --
> [ Drupal support list | http://lists.drupal.org/ ]
>