Linked Questions

7
votes
2answers
5k views

Hacked Ubuntu server, probably hacked commands (netstat, ps, …), how to replace them? [duplicate]

An Ubuntu server of my company has been hacked to carry out a DoS attack. I found the shellshock bug had not been fixed by my colleagues, and I think it's the problem. Then, I found an ELF file that ...
13
votes
2answers
31k views

Advice on what to do after being hacked? [duplicate]

After running a system scan earlier today, I found that my computer had been infected by a trojan horse. My reason for running the scan was because Windows kept shutting down and then recovering. ...
6
votes
3answers
27k views

How can I kill minerd malware on an AWS EC2 instance? [duplicate]

I have an AWS EC2 instance running RHEL 7.2 which seems to have been hacked by a BitCoin CPU Miner. When I run ps -eo pcpu,args --sort=-%cpu | head, it shows that there is a CPU miner that's taking up ...
6
votes
3answers
3k views

My sites have been hacked by cpamatik.com , it passes all security checks with Google and Sucuri, but still redirects, any idea? [duplicate]

Almost all my sites got hacked by cpamatik.com virus All CMS were up to date, plugins, modules etc..(Drupal and Wordpress) , some sites I have logged in to work on, but some sites I haven't touched ...
1
vote
2answers
5k views

Fake Microsoft Security Department [duplicate]

some Indian man called home saying that he's calling from some Windows Security Department, and there are about 16 other people connected to my computer and the're doing illegal things on my computer. ...
1
vote
3answers
7k views

Malware Suddenly Uploaded To My Website! [duplicate]

This is my first question here on the IT Security section of Stack Exchange, so if there is any problems with my question I apologize. Basics Suddenly Google says that my website contains Malware! ...
0
votes
1answer
3k views

Command & Control Server List [duplicate]

I recently got an email from my ISP saying that they'd detected traffic to a known Command & Control server from my home. Boo. I'm sure this probably means one of our computers has some awful ...
2
votes
2answers
2k views

A process called ./watchbog is mining crypto currency in our server. How do I stop it? [duplicate]

I have found this question below but I need some more clarification that's why I am writing again. I have a process called “watchbog” that is completely hogging my CPU and I don't know what it is ...
2
votes
1answer
2k views

Can you get rid of the ZeroAccess botnet without a complete reinstall? [duplicate]

I'm interested in the recommended course of action for when you find a (Windows) system infected with the ZeroAccess botnet. I've seen various blog posts online recommending that the user download ...
6
votes
1answer
2k views

I have a process called “watchbog” that is completely hogging my CPU and I don't know what it is [duplicate]

This process that has come out of nowhere is hogging my CPU and I have no clue what it is or how to get rid of it. You can see in the image below what it's doing: What is this process? How can I get ...
1
vote
2answers
664 views

How to know if a host has been compromised and re-secure it again? (particular case of a raspberry) [duplicate]

I'm running a raspberry PI and I've accidentally left the 22 port open to it from a public IP for about 24 hours. Raspberries' raspbian distro comes by default with a "pi" user and "raspberry" ...
-1
votes
1answer
2k views

How can we find out the fully undetectable virus and kill it in our computer? [duplicate]

As I know, most hacker can crypt the virus to bypass all antivirus. Even famous antivirus like kaspersky and avast doesn't know it. So, is there a good way to find out the FUD virus and protect from ...
0
votes
1answer
2k views

PHP mallware attack [duplicate]

I'm desprate because my site has been attacked by some malware that adds code below on every php files. I tried to edit and chmod the infected file but its coming back. Scanning with ClamAV found ...
-1
votes
3answers
757 views

Malware in RevSlider plugin? [duplicate]

Maybe my WordPress site is hacked, because it's always sending spam (5000 per day). I found one file in plugins folder which contains this base64 code. What should I do? EDIT: Oh, I found another ...
5
votes
2answers
557 views

How to evaluate the damage after being hacked [duplicate]

It's well known what measures one should take to prevent hackers from hacking their PC. But are there any steps that allows a user to evaluate the damage done by a hacker? Say that I know for sure ...

15 30 50 per page